CVE-2018-18856

Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because...

PT-2018-14692

Name of the Vulnerable Software and Affected Versions LiquidVPN client versions through 1.37 for macOS Description A local privilege escalation issue has been identified, allowing an attacker to communicate with an unprotected XPC service. This enables the execution of arbitrary OS commands as ro...

CVE-2018-18856: Improper Neutralization of Special Elements used in an OS Command

Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because...

LiquidVPN For macOS Elevation of Privilege Vulnerability

LiquidVPN For MacOS is a VPN software for anonymous access to the Internet based on the MacOS platform. An elevation of privilege vulnerability exists in the 'openvpncmd' parameter in LiquidVPN For MacOS 1.37 and 1.36 and earlier versions. An attacker can exploit this vulnerability to gain elevat...