12353 matches found
CVE-2020-0798: Undefined Security Weakness
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading Exploit
Exploit for php platform in category web applications exploit-phar-loading.py !/usr/bin/env python3 from horde import Horde import requests import subprocess import sys TEMPDIR = '/tmp' WWWROOT = '/var/www/html' if lensys.argv ' sys.exit1 baseurl = sys.argv1 username = sys.argv2 password =...
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading exploit-phar-loading.py !/usr/bin/env python3 from horde import Horde import requests import subprocess import sys TEMPDIR = '/tmp' WWWROOT = '/var/www/html' if lensys.argv ' sys.exit1 baseurl = sys.argv1 username = sys.argv2 password =...
Horde Groupware Webmail Edition 5.2.22 - PHAR Loading
exploit-phar-loading.py !/usr/bin/env python3 from horde import Horde import requests import subprocess import sys TEMPDIR = '/tmp' WWWROOT = '/var/www/html' if lensys.argv ' sys.exit1 baseurl = sys.argv1 username = sys.argv2 password = sys.argv3 filename = sys.argv4 phpcode = sys.argv5 source =...
Secure Boot Disclosure Information
The vulnerability of the Secure Boot protocol for Windows operating systems is related to errors in accessing debug functions during the loading process. Exploiting this vulnerability can allow attackers to disclose sensitive information, using a specially created application...
AZL-9920 CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1
usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...
Tencent Document Dll Hijacking Vulnerability
Tencent Document is an online document that allows for multi-person collaboration. Tencent Document has a Dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and execute arbitrary code...
February 27, 2020—KB4535996 (OS Builds 18362.693 and 18363.693)
None None...
WebExtension Component Confidential Data Access
The vulnerability of the WebExtension component in the Firefox browser is related to an extension error that prevents the loading and use of certain pages. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...
February 25, 2020—KB4537818 (OS Build 17763.1075)
None None...
February 25, 2020—KB4537819 (Preview of Monthly Rollup)
None None...
February 25, 2020—KB4537816 (OS Build 16299.1717)
None None...
Malwarebytes Anti-Malware Remote Code Execution (CVE-2019-6739)
A remote code execution vulnerability exists in Malwarebytes Anti-Malware. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by enticing a us...
ALPINE-CVE-2019-20044
In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULEPATH=/dir/with/module zmodload with a module that calls setuid...
[SECURITY] Fedora 30 Update: glib2-2.60.7-3.fc30
GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system...
Bitdefender Endpoint Security Tool Code Issue Vulnerability
Bitdefender Endpoint Security Tool is an endpoint security management tool from the Romanian company Bitdefender. A code issue vulnerability exists in the EPSecurityService.exe file in versions prior to Bitdefender Endpoint Security Tools 6.6.11.163. The vulnerability stems from an improper desig...
CVE-2020-8601
Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...
CVE-2020-8601
Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...
CVE-2020-8601
Trend Micro Vulnerability Protection 2.0 is affected by a DLL sideloading issue in the product installer that could load other DLL files located in the same directory. The vulnerability arises during installation, enabling local manipulation of loaded DLLs. Available public references describe Tr...
