7654 matches found
CVE-2024-5245 NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability
NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. An attacker must first obtain the ability to execute...
CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack
The following Rapid7 team members contributed to this blog: Ipek Solak, Thomas Elkins, Evan McCann, Matthew Smith, Jake McMahon, Tyler McGraw, Ryan Emmons, Stephen Fewer, and John Fenninger Overview Justice AV Solutions JAVS is a U.S.-based company specializing in digital audio-visual recording...
CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack
The following Rapid7 team members contributed to this blog: Ipek Solak, Thomas Elkins, Evan McCann, Matthew Smith, Jake McMahon, Tyler McGraw, Ryan Emmons, Stephen Fewer, and John Fenninger Overview Justice AV Solutions JAVS is a U.S.-based company specializing in digital audio-visual recording...
A Catalog of Hazardous AV Sites – A Tale of Malware Hosting
A Catalog of Hazardous AV Sites – A Tale of Malware Hosting By Trellix · May 23, 2024 This blog was written by Gurumoorthi Ramanathan Executive summary In mid-April 2024, Trellix Advanced Research Center team members observed multiple fake AV sites hosting highly sophisticated malicious files suc...
NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from the use of a...
CVE-2024-21813
Exposure of resource to wrong sphere in some IntelR DTT software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-43629
Incorrect default permissions in some IntelR GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-3640 Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables
An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threat actor to enter a malicious executabl...
PT-2024-13129 · Intel · Intel Gpa
Name of the Vulnerable Software and Affected Versions: IntelR GPA software versions prior to 2023.3 Description: The issue is related to incorrect default permissions in some IntelR GPA software installers, which may allow an authenticated user to potentially enable escalation of privilege via...
PT-2024-13042 · Unknown · Endurance Gaming Mode
Name of the Vulnerable Software and Affected Versions: Endurance Gaming Mode software versions prior to 1.3.937.0 Description: The issue is related to incorrect default permissions in some software installers, which may allow an authenticated user to potentially enable escalation of privilege via...
CVE-2024-27244
Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access...
CVE-2024-27244
Summary (CVE-2024-27244) Zoom Workplace VDI App for Windows contains an issue where the installer performs insufficient validation of data authenticity, enabling an authenticated user to escalate privileges via local access. Documented impact is elevation of privilege with local access; no exploi...
CVE-2024-3182
Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise Message Service EMS password to be exposed outside of the hawkagent.cfg and hawkevent.cfg config files...
CVE-2024-3182
CVE-2024-3182 affects TIBCO Hawk versions 6.2.0–6.2.3, where the Universal Installer (including the Silent Installer) can disclose the EMS password outside hawkagent.cfg and hawkevent.cfg. Root cause: install-time password exposure due to the installer process. Impact per advisory: potential acce...
PT-2024-5136 · Zoom · Zoom Workplace App For Windows
Name of the Vulnerable Software and Affected Versions: Zoom Workplace VDI App for Windows affected versions not specified Description: The issue is related to insufficient verification of data authenticity in the installer, which may allow an authenticated user to conduct an escalation of privile...
Intel DTT Software Installer Advisory - Lenovo Support US
No description provided...
RHEL 8 : coreos-installer (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - coreos-installer: restrict access permissions on /boot/ignition,/config.ign CVE-2021-3917 Note that Nessus has not...
PT-2024-24315 · Samsung · Samsung Portable Ssd For T5
Name of the Vulnerable Software and Affected Versions: Samsung Portable SSD for T5 version 1.6.10 Description: An issue was discovered in the installer of Samsung Portable SSD for T5 on Windows, allowing an attacker to tamper with the directory and DLL files used during the installation process...
PVS 2402 | Console Setup: EdgeWebView2 not installing correctly
When launching the "Console Installer" it tries to install the prerequired software which includes Edge WebView2. In some cases when installing it from the iso, Edge WebView2 might not show up in "appwiz.cpl" or "Apps and Features". If you start the "Console Installer" again it is shown as "not...
