Lucene search
+L

1278 matches found

BDU FSTEC
BDU FSTEC
added 2023/12/27 12:0 a.m.11 views

The vulnerability of the virtio-gpu component of the Parallels Desktop hypervisor Virtual Device allows a hacker to execute arbitrary code.

The vulnerability of the virtio-gpu Virtual Device component in Parallels Desktop hypervisor is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by writing data beyond the bounds of the allocated buffer...

8.3CVSS7.9AI score0.00757EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/12/25 12:0 a.m.6 views

The vulnerability of the Updater service in Parallels Desktop hypervisor allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Updater service in Parallels Desktop operates due to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to elevate privileges and execute arbitrary code within the root context...

7.8CVSS7.6AI score0.00686EPSS
SaveExploits1References4
Zero Day Initiative
Zero Day Initiative
added 2023/12/19 12:0 a.m.22 views

Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Updater...

7.8CVSS7.5AI score0.00686EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/19 12:0 a.m.29 views

Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Parallels Desktop. User interaction is required to exploit this vulnerability in that the target in a guest system must visit a malicious page or open a malicious file. The specific flaw exists withi...

8.3CVSS7.3AI score0.00757EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/19 12:0 a.m.30 views

Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Updater...

7.8CVSS7.5AI score0.00211EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/14 8:15 p.m.9 views

CVE-2023-45894

The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques...

10CVSS6.3AI score0.01205EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/14 8:15 p.m.30 views

CVE-2023-45894

The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques...

10CVSS0.01205EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/12/14 8:15 p.m.13 views

CVE-2023-45894

The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques...

10CVSS6.4AI score0.01205EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/14 8:15 p.m.24 views

Remote code execution

The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques...

7.5CVSS8.1AI score0.01205EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/14 12:0 a.m.5 views

Parallels Remote Application Server Security Vulnerability

Parallels Remote Application Server RAS is an application delivery cum VDI Virtual Desktop Infrastructure solution from Parallels, Inc. in the United States. A security vulnerability exists in Parallels Remote Application Server versions prior to 19.2.23975, which stems from the fact that the...

10CVSS7.9AI score0.01205EPSS
SaveExploits0References2
CVE
CVE
added 2023/12/14 12:0 a.m.47 views

CVE-2023-45894

CVE-2023-45894 affects the Parallels Remote Application Server (RAS). The vulnerability stems from the RAS not segmenting virtualized applications from the server, enabling a remote attacker to achieve remote code execution via kiosk-breakout techniques on versions prior to 19.2.23975. Reported s...

10CVSS9.6AI score0.01205EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/14 12:0 a.m.38 views

CVE-2023-45894

The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques...

9.9AI score0.01205EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/11 12:0 a.m.8 views

PT-2023-29752 · Parallels · Parallels Ras

Name of the Vulnerable Software and Affected Versions: Parallels RAS versions prior to 19.2.23975 Description: The issue allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques because the Remote Application Server in Parallels RAS does not segment...

10CVSS7.5AI score0.01205EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.8 views

The vulnerability of the Toolgate component in Parallels Desktop hypervisor allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Toolgate supervisor in Parallels Desktop is related to errors in XML request processing. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

7.8CVSS7.6AI score0.00321EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.6 views

The vulnerability of the Updater service in Parallels Desktop hypervisor allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Updater service in Parallels Desktop operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

7.8CVSS7.6AI score0.00201EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.9 views

The vulnerability of the Parallels Desktop Hypervisor Service allows a attacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the Parallels Desktop Hypervisor Service is related to initialization errors. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

7.8CVSS7.6AI score0.00369EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.8 views

The vulnerability of the Updater service in Parallels Desktop hypervisor allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Updater service in Parallels Desktop operating systems is related to initialization errors. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

7.8CVSS7.6AI score0.00369EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.11 views

The vulnerability of the Updater service in Parallels Desktop hypervisor allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Toolgate controller in Parallels Desktop lies in initialization errors. Exploiting this vulnerability allows an attacker to execute arbitrary code and enhance their privileges...

7.8CVSS7.7AI score0.00363EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.14 views

The vulnerability of the Toolgate component in Parallels Desktop hypervisor allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Toolgate controller in Parallels Desktop involves synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

7.5CVSS7.6AI score0.00405EPSS
SaveExploits0References5
GithubExploit
GithubExploit
added 2023/10/28 10:29 a.m.492 views

Exploit for Link Following in Parallels Parallels_Desktop

parallels-file-move-privesc This repository c...

7.8CVSS7.8AI score0.00686EPSS
SaveExploits1
Rows per page
Query Builder