Privilege Escalation

PanelSW.Custom.WiX is vulnerable to Privilege Escalation. This vulnerability is caused due to the lack of proper access controls in the C:\Windows\Temp directory, allowing standard users to hijack the binaries before execution, potentially leading to Privilege Escalation...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path due to the improper handling of the .be TEMP folder. An attacker can escalate privileges by monitoring the user's TEMP folder for changes and inserting a malicious DLL into the .be/.Local folder immediately when th...