17 matches found
EUVD-2018-10943
Malware in sbrugna...
CVE-2018-19234
The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation...
CVE-2018-19233
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
CVE-2018-19233
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
CVE-2018-19234
The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation...
Hardcoded credentials
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
Input validation
The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation...
CVE-2018-19233
CVE-2018-19233 affects Miss Marple Enterprise Edition before 2.0. Local attackers can execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file. The vulnerability is due to hard-coded credentials (AES key) in the affected component;...
CVE-2018-19233
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
CVE-2018-19234
CVE-2018-19234 affects the Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition prior to version 2.0 . The root cause is missing update validation , enabling a remote attacker to execute arbitrary code with SYSTEM privileges . This vulnerability is documented across multiple sou...
CVE-2018-19234
The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation...
PT-2018-14884
Name of the Vulnerable Software and Affected Versions COMPAREX Miss Marple Enterprise Edition versions prior to 2.0 Description The issue allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file. Recommendatio...
PT-2018-14885
Name of the Vulnerable Software and Affected Versions COMPAREX Miss Marple Enterprise Edition versions prior to 2.0 Description The issue allows remote attackers to execute arbitrary code with SYSTEM privileges due to missing update validation in the Miss Marple Updater Service. Recommendations F...
CVE-2018-19233: Use of Hard-coded Credentials
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
CVE-2018-19234: Download of Code Without Integrity Check
The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation...
Miss Marple Enterprise Edition Code Execution Vulnerability
Miss Marple Enterprise Edition is a suite of enterprise IT asset and license management programs. A security vulnerability in Miss Marple Enterprise Edition prior to version 2.0 exists because the program fails to detect updates. An attacker could exploit the vulnerability to execute arbitrary co...
Miss Marple Enterprise Edition File Upload / Hardcoded AES Key Vulnerability
Exploit for windows platform in category local exploits ======================================================================= title: Multiple critical vulnerabilities product: Miss Marple Enterprise Edition vulnerable version: 2.0 fixed version: 2.0 CVE number: CVE-2018-19233, CVE-2018-19234...