CVE-2020-7821 Tobesoft NEXACRO14/17 ExCommonApiV13 Arbitrary Code Execution Vulnerability

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC...

CVE-2020-7821

Nexacro14/17 ExtCommonApiV13 Library (versions prior to 2019.9.6) contains an input validation error that could allow a remote attacker to execute arbitrary code by modifying a registry path. This vulnerability is cited across multiple sources (Red Hat, CNVD, CVE listings) and is described as ena...

Canada country code is incorrect in Windows 7 SP1 or Windows Server 2008 R2 SP1

Canada country code is incorrect in Windows 7 SP1 or Windows Server 2008 R2 SP1 Symptoms Assume that you have a computer that is running Windows 7 Service Pack 1 SP1 or Windows Server 2008 R2 SP1. You set the computer to use the English Canada language format in the Region and Language setting. I...

SharpHide - Tool To Create Hidden Registry Keys

Just a nice persistence trick to confuse DFIR investigation. Uses NtSetValueKey native API to create a hidden null terminated registry key. This works by adding a null byte in front of the UNICODESTRING key valuename. More info about this technique can be found in the following whitepaper:...

UBUNTU-CVE-2018-18838

An issue was discovered in Netdata 1.10.0. Log Injection or Log Forgery exists via a %0a sequence in the url parameter to api/v1/registry...

EMC Replication Manager / EMC AppSync privilege escalation

Registry path is stored without quotes...

PT-2010-2242 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Windows Vista versions Gold, SP1, and SP2 Windows Server 2008 versions Gold, SP2, and R2 Windows 7 Description: A denial of service issue exists due to the improper translation of a registry key's virtual path to its real path by the Windows...