CVE-2023-28141 NTFS Junction

An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers may write files to arbitrary locations via a local attack vector. This allows attackers to assume the privileges of the process, and they may delete or otherwise on unauthorized...

CVE-2023-28141 NTFS Junction

An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers may write files to arbitrary locations via a local attack vector. This allows attackers to assume the privileges of the process, and they may delete or otherwise on unauthorized...

CVE-2023-28141

The CVE-2023-28141 issue affects Qualys Cloud Agent for Windows prior to version 4.8.0.31 and is caused by an NTFS Junction condition. An attacker with local access can write files to arbitrary locations, potentially escalating to the privileges of the agent process and modifying or deleting sens...

CVE-2023-28140

CVE-2023-28140 concerns the Qualys Cloud Agent for Windows. Affected are versions before 4.5.3.1, with the exploit described as an executable hijacking via a malicious DLL loaded locally instead of the expected DLL when processes run with escalated privileges. The vulnerability is bounded to the ...

CVE-2023-28140 Executable Hijacking

An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may load a malicious copy of a Dependency Link Library DLL via a local attack vector instead of the DLL that the application was expecting, when processes are running with...

CVE-2023-28140 Executable Hijacking

An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may load a malicious copy of a Dependency Link Library DLL via a local attack vector instead of the DLL that the application was expecting, when processes are running with...

PT-2023-17699 · Kylinsoft · Youker-Assistant

Name of the Vulnerable Software and Affected Versions: KylinSoft youker-assistant versions prior to 3.1.4.13 Description: A critical issue was found in the adjust cpufreq scaling governer function, leading to os command injection. The attack can be launched on the local host. Recommendations: For...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

CVE-2023-27193

An issue found in DUALSPACE v.1.1.3 allows a local attacker to gain privileges via the keyadnewuseravoidtime field...

Microsoft Word Remote Code Execution

Title: Microsoft Word Remote Code Execution Vulnerability Author: nu11secur1ty Date: 04.14.2023 Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/word?activetab=tabs%3afaqheaderregion3 Reference:...

PT-2023-20997 · Dualspace · Dualspace

Name of the Vulnerable Software and Affected Versions: DUALSPACE version 1.1.3 Description: An issue in DUALSPACE allows a local attacker to gain privileges via the key ad new user avoid time field. Recommendations: For DUALSPACE version 1.1.3, consider restricting access to the key ad new user...

PT-2023-13086 · Rpmb · Rpmb

Name of the Vulnerable Software and Affected Versions: rpmb affected versions not specified Description: The issue is related to a logic error in rpmb, which could lead to a possible out of bounds write. This might result in local escalation of privilege, requiring System execution privileges. No...

Microsoft Excel Spoofing

Title: Microsoft Excel Spoofing Vulnerability Author: nu11secur1ty Date: 04.06.2023 Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/excel Reference: https://www.rapid7.com/fundamentals/spoofing-attacks/ CVE-2023-23398 Description: The attack itself is...

Microsoft Excel Spoofing Vulnerability

Title: Microsoft Excel Spoofing Vulnerability Author: nu11secur1ty Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/excel Reference: https://www.rapid7.com/fundamentals/spoofing-attacks/ CVE-2023-23398 Description: The attack itself is carried out locally...

USN-6000-1 linux-bluefield vulnerabilities

It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...

CVE-2023-1745

A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73. This issue affects some unknown processing in the library SHFOLDER.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public a...

Design/Logic Flaw

A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73. This issue affects some unknown processing in the library SHFOLDER.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public a...

CVE-2023-1745

CVE-2023-1745 (KMPlayer 4.2.2.73) involves an issue in the SHFOLDER.dll component that enables an uncontrolled search path due to a manipulation in processing. This vulnerability requires local access to exploit and has been publicly disclosed. Affected software is KMPlayer, with the root cause d...

CVE-2023-1745 KMPlayer SHFOLDER.dll uncontrolled search path

A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73. This issue affects some unknown processing in the library SHFOLDER.dll. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public a...

PT-2023-17210 · Mplayer +1 · Mplayer +1

Name of the Vulnerable Software and Affected Versions: KMPlayer version 4.2.2.73 Description: A problematic issue has been found in the library SHFOLDER.dll, affecting some unknown processing. The manipulation leads to an uncontrolled search path. This issue requires local attacking to be...