EUVD-2019-15206

Malware in sbrugna...

CVE-2019-5631: Uncontrolled Search Path Element

The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerability in the 'prunsrv.exe' component of the product. If exploited, a local user of the system who must already be authenticated to the operating system can elevate their privileges with this vulnerability to the privilege level ...