PT-2020-4747 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment, there is no...

Microsoft Win32k Elevation of Privilege (CVE-2020-17038)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2020-17088)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

DiskBoss v11.7.28 - Multiple Services Unquoted Service Path Vulnerability

Exploit Title: DiskBoss v11.7.28 - Multiple Services Unquoted Service Path Exploit Author: Mohammed Alshehri Vendor Homepage: https://www.diskboss.com/ Software Link: https://www.diskboss.com/downloads.html Version: v11.7.28 Tested on: Microsoft Windows Server 2019 Standard 10.0.17763 N/A Build...

iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation

Exploit Title: iDS6 DSSPro Digital Signage System 6.2 - Improper Access Control Privilege Escalation Date: 2020-07-16 Exploit Author: LiquidWorm Vendor Homepage: http://www.yerootech.com Version: 6.2 iDS6 DSSPro Digital Signage System 6.2 Improper Access Control Privilege Escalation Vendor:...

Microsoft Windows Kernel Local Elevation of Privilege (CVE-2020-17087)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Wondershare Dr.Fone 3.0.0 Unquoted Service Path Vulnerability

Exploit Title: Wondershare Dr.Fone DriverInstall.exe - "WsDrvInst" Unquoted Service Path Exploit Author: Andrea Intilangelo Vendor Homepage: https://www.wondershare.com Software Link: https://drfone.wondershare.com/ Version: 3.0.0 Tested on: Microsoft Windows 7sp2 x86/x64 CVE : CVE-2020-27992 -...

Security Bulletin: A Remote Vulnerability Affects IBM Sterling Connect:Direct for Microsoft Windows (CVE-2020-4767)

Summary IBM Sterling Connect:Direct for Microsoft Windows could allow a remote attacker to cause a denial of service, caused by a buffer over-read. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-4767 DESCRIPTION: IBM...

CVE-2020-4767

IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read. Bysending a specially crafted request, the attacker could cause the application to crash. IBM X-Force ID: 188906...

Code injection

IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read. Bysending a specially crafted request, the attacker could cause the application to crash. IBM X-Force ID: 188906...

CVE-2020-4767

IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused by a buffer over-read. Bysending a specially crafted request, the attacker could cause the application to crash. IBM X-Force ID: 188906...

North Korea-Backed Spy Group Poses as Reporters in Spearphishing Attacks, Feds Warn

The North Korean advanced persistent threat APT group known as Kimsuky is actively attacking commercial-sector businesses, often by posing as South Korean reporters, according to an alert from the U.S. Cybersecurity and Infrastructure Security Agency CISA. Kimsuky a.k.a. Hidden Cobra has been...

IP Watcher v3.0.0.30 - 'PACService.exe' Unquoted Service Path

Exploit Title: IP Watcher v3.0.0.30 - 'PACService.exe' Unquoted Service Path Date: 2020-8-25 Exploit Author: Mohammed Alshehri Vendor Homepage: https://www.gearboxcomputers.com/ Software Link: https://www.gearboxcomputers.com/files/IPWatcherSetup.exe Version: 3.0.0.30 Tested on: Microsoft Windows...

Microsoft Base3D Code Issue Vulnerability

Microsoft Windows is a desktop operating system from Microsoft. Microsoft Base3D code issue vulnerability, which allows an attacker to gain execution rights on the victim's system. There are no detailed vulnerability details provided at this time...

Google Mending Another Crack in Widevine

For the second time in as many years, Google is working to fix a weakness in its Widevine digital rights management DRM technology used by online streaming sites like Disney, Hulu and Netflix to prevent their content from being pirated. The latest cracks in Widevine concern the encryption...

Microsoft Windows Active Directory Remote Code Execution (CVE-2020-0718)

A remote code execution vulnerability exists in Microsoft Windows Active Directory. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Windows Bluetooth suffers from a logic flaw vulnerability (CNVD-2020-59796)

Microsoft Chinese name Microsoft Corporation or American Microsoft Corporation is an American multinational technology company in the business of developing, manufacturing, licensing, and providing a wide range of computer software services. A logic flaw vulnerability exists in Microsoft Windows...

Logic Flaw Vulnerability in Microsoft Windows Bluetooth

Microsoft Chinese name Microsoft Corporation or American Microsoft Corporation is an American multinational technology company in the business of developing, manufacturing, licensing, and providing a wide range of computer software services. A logic flaw vulnerability exists in Microsoft Windows...