33 matches found
PPLmedic
PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...
EUVD-2021-23524
Malware in sbrugna...
EUVD-2020-9025
Malware in sbrugna...
Malicious code in test-mlw2-medic-clews (npm)
The package test-mlw2-medic-clews was found to contain malicious code...
Malicious code in test-mlw2-medic-solar (npm)
The package test-mlw2-medic-solar was found to contain malicious code...
MAL-2025-35763 Malicious code in test-mlw2-medic-solar (npm)
The package test-mlw2-medic-solar was found to contain malicious code...
MAL-2025-35762 Malicious code in test-mlw2-medic-clews (npm)
The package test-mlw2-medic-clews was found to contain malicious code...
WordPress Theme Medic 1.0.0 Weak Password Recovery Mechanism
Exploit Title: WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password Dork: inurl:/wp-includes/class-wp-query.php Date: 2023-06-19 Exploit Author: Amirhossein Bahramizadeh Category : Webapps Vendor Homepage:...
WordPress Medic Theme v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password Exploit
Exploit Title: WordPress Theme Medic v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password Dork: inurl:/wp-includes/class-wp-query.php Exploit Author: Amirhossein Bahramizadeh Category : Webapps Vendor Homepage:...
Microsoft Uncovers Austrian Company Exploiting Windows and Adobe Zero-Day Exploits
A cyber mercenary that "ostensibly sells general security and information analysis services to commercial customers" used several Windows and Adobe zero-day exploits in limited and highly-targeted attacks against European and Central American entities. The company, which Microsoft describes as a...
Microsoft Windows Update Medic Service Privilege Escalation Vulnerability
Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation...
CVE-2021-36948
Windows Update Medic Service Elevation of Privilege Vulnerability...
CVE-2021-36948
Windows Update Medic Service Elevation of Privilege Vulnerability...
Privilege escalation
Windows Update Medic Service Elevation of Privilege Vulnerability...
CVE-2021-36948 Windows Update Medic Service Elevation of Privilege Vulnerability
...
CVE-2021-36948 Windows Update Medic Service Elevation of Privilege Vulnerability
...
CVE-2021-36948
Technical details are not publicly provided in the available documents. The CVE is described as Windows Update Medic Service EoP, with some sources noting exploitation in the wild, but there is no concrete root cause, affected versions, or fix details here.
CVE-2021-36948: Undefined Security Weakness
Windows Update Medic Service Elevation of Privilege Vulnerability...
CVE-2021-36948
Windows Update Medic Service Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
The vulnerability of the Windows Update Medic Service component in Windows operating systems arises from operations that go beyond the buffer limits in memory, allowing attackers to execute arbitrary code with elevated privileges.
The vulnerability of the Windows Update Medic Service component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code with elevated privileges...