2822 matches found
CVE-2019-16913
PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILESX86%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: F" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as...
CVE-2019-16913
PC Protect Antivirus (v4.14.31) is installed to %PROGRAMFILES(X86)%\PCProtect with overly permissive folder ACLs (Everyone: (F)). The component also creates a service (SecurityService) that runs as LocalSystem. This combination enables privilege escalation to NT AUTHORITY\SYSTEM by replacing the ...
CVE-2019-16913: Incorrect Default Permissions
PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILESX86%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: F" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as...
ASX To MP3 Converter 3.1.3.7 Local Stack Overflow
Exploit Title: ASX to MP3 converter 3.1.3.7 - '.asx' Local Stack Overflow DEP Google Dork: N/A Date: 2019-10-06 Exploit Author: max7253 Vendor Homepage: http://www.mini-stream.net/ Software Link: https://www.exploit-db.com/apps/f4da5b43ca4b035aae55dfa68daa67c9-ASXtoMP3Converter.exe Version:...
PT-2019-14863
Name of the Vulnerable Software and Affected Versions PC Protect Antivirus version 4.14.31 Description The issue concerns weak folder permissions in the default installation directory of PC Protect Antivirus, allowing any user to modify the contents of the directory and its subfolders...
ASX to MP3 converter 3.1.3.7 - .asx Local Stack Overflow (DEP)
ASX to MP3 converter 3.1.3.7 - .asx Local Stack Overflow DEP Exploit Title: ASX to MP3 converter 3.1.3.7 - '.asx' Local Stack Overflow DEP Google Dork: N/A Date: 2019-10-06 Exploit Author: max7253 Vendor Homepage: http://www.mini-stream.net/ Software Link:...
VLC Media Player Allows Desktop Takeover Via Malicious Video Files
Two high-risk vulnerabilities in the VLC media player could allow an adversary to craft a malicious .MKV video file that could be used in an attack to gain control of the victim’s PC. The flaws were made public Monday by the developer of the open-source VLC media player, VideoLAN project, who als...
Mitsubishi MELSEC-Q series Q10WCPU-W1-E PC Controller
Binary data 764918.prm...
Mitsubishi MELSEC-Q series Q10WCPU-W1-CFE PC Controller
Binary data 764919.prm...
Financial threats in H1 2019
Introduction and methodology Financial cyberthreats are malicious programs that attack users of online banking services, electronic money, cryptocurrency and other similar services, as well as threats aimed at gaining access to financial organizations and their infrastructure. Kaspersky experts...
Huawei PC Manager Authorization Issues Vulnerability
Huawei PC Manager is a computer management application from Huawei China. An authorization issue vulnerability exists in Huawei PC Manager version 9.1.3.1, which arises from the driver's interface not adequately validating data from the userland. An attacker could exploit the vulnerability to...
PT-2019-4444
Name of the Vulnerable Software and Affected Versions Huawei PC Manager version 9.1.3.1 Description The issue is related to improper authentication in the Huawei PC Manager application, which can be exploited to execute arbitrary code. The vulnerability is due to the software's failure to properl...
Security Advisory - Improper Authentication Vulnerability on PC Manager
There is an improper authentication vulnerability on PC Manager. The certain driver interface of the software does not perform a validation of user-mode data properly, successful exploit could result in malicious code execution. Vulnerability ID: HWPSIRT-2019-04061 This vulnerability has been...
PT-2019-5353
Name of the Vulnerable Software and Affected Versions pc-kernel versions prior to and including 2019-07-16 Description The issue is related to the pc-kernel snap build process, which hardcoded the --allow-insecure-repositories and --allow-unauthenticated apt options when creating the build chroot...
PT-2019-4592
Name of the Vulnerable Software and Affected Versions Huawei PC Manager versions prior to 9.0.1.66 Oversea Huawei PC Manager versions prior to 9.0.1.70 China Description The issue is related to insufficient access control in the Huawei PC Manager application, allowing an attacker to execute...
Security Advisory - Three Vulnerabilities in Huawei PCManager Product
There are two code execution vulnerabilities in Huawei PCManager product. Successful exploitation may cause the attacker to execute code and read/write information. Vulnerability ID: HWPSIRT-2019-05105 and HWPSIRT-2019-05131 The two vulnerabilities have been assigned two Common Vulnerabilities an...
Intel Patches High-Severity Flaw in Processor Diagnostic Tool
Intel has patched a high-severity vulnerability in its processor diagnostic tool, which could allow local attackers to launch several malicious attacks on affected devices, such as escalation of privilege or denial of service. The Intel Processor Diagnostic tool is a free product that allows user...
10 Powerful But Not Yet Promoted Antivirus for PC, Mac, Android, iPhone
By Lesley Haught The vulnerability of the regular computer user is at an all-time high. Not even the strongest of world governments have been able to stay safe from attacks, unauthorized accesses, and data leakages attempted by hackers, malware programs. The big question, then, that every compute...
The vulnerability of the PC Worx, PC Worx Express, INTERBUS Config+ software package, Automationworx Software Suite components, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.
The vulnerability of the PC Worx, PC Worx Express, INTERBUS Config+ software suite components is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...