CVE-2023-22358

CVE-2023-22358 concerns the BIG-IP Edge Client for Windows DLL hijacking. The vulnerability affects the BIG-IP Edge Client Windows Installer when installed on Windows systems running versions 7.2.2.x or 7.2.3.x prior to 7.2.3.1, enabling a malicious DLL to be loaded via an uncontrolled search pat...

CVE-2023-22358 BIG-IP Edge Client for Windows vulnerability

In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

K76964818: BIG-IP Edge Client for Windows vulnerability CVE-2023-22358

Security Advisory Description A DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. CVE-2023-22358 Impact An attacker may exploit this vulnerability to use malicious Dynamic Link Libraries DLL to gain privilege escalation on the client Windows system. The installer loa...

VulnCheck KEV: CVE-2018-17207

An issue was discovered in Snap Creek Duplicator before 1.2.42. By accessing leftover installer files installer.php and installer-backup.php, an attacker can inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution...

VulnCheck KEV: CVE-2022-2551

The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin, if the installer script has been run once by an administrator, allowing download of the full site backup without authenticating...

PT-2023-1554 · Nvidia · Nvidia Geforce Experience

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce Experience affected versions not specified Description: The issue is related to the installer of the NVIDIA GeForce Experience software, where a user may inadvertently delete data from a linked location, potentially leading to...

Razer Synapse 代码问题漏洞

Razer Synapse is an application from Razer, Inc. designed to configure and customize Razer's line of hardware. A security vulnerability exists in versions prior to Razer Synapse 3.7.0830.081906 that stems from its insecure installation path, improper privilege management, and improper certificate...

CVE-2022-47632

Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed a...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Design/Logic Flaw

Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware component: NextGen Installer issues. Supported versions that are affected are Prior to 13.9.4.2.11. Easily exploitable vulnerability allows low privileged attacker with logon to the...

Microsoft Windows Installer Service Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...

PT-2023-6734 · Oracle · Oracle Global Lifecycle Management Nextgen Oui Framework

Name of the Vulnerable Software and Affected Versions: Oracle Global Lifecycle Management NextGen OUI Framework versions prior to 13.9.4.2.11 Description: The issue is related to insufficient input validation in the NextGen Installer issues component of Oracle Global Lifecycle Management NextGen...

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar

Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive JAR files, once again highlighting how threat actors are continuously finding new ways to fly under the radar. "Attackers now use the polyglot technique to confuse security...

CVE-2023-21542

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-21542

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-21542

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

Windows Installer Elevation of Privilege Vulnerability

...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...

CVE-2023-21542

CVE-2023-21542 is a Windows Installer local elevation of privilege vulnerability. The connected documents (notably the NCSC advisory) list Windows Installer as affected and categorize the impact as “Obtaining increased privileges.” The available sources do not provide root cause specifics, affect...