Privilege escalation

Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection MTP prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the IOCTL interface...

CVE-2021-23872

Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection MTP prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the IOCTL interface...

Privilege escalation

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.32 allows a local user to gain elevated privileges by impersonating a client token which could lead to the bypassing of MTP self-defense...

CVE-2021-23891

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.32 allows a local user to gain elevated privileges by impersonating a client token which could lead to the bypassing of MTP self-defense...

CVE-2021-23872

Summary: CVE-2021-23872 affects McAfee Total Protection (MTP) — File Lock component. **Root cause:**Privilege escalation by manipulating a symbolic link through the IOCTL interface. Impact: local user gains elevated privileges (confidentiality, integrity, and availability impact rated High). Affe...

CVE-2021-23872 Privilege Escalation vulnerability in McAfee Total Protection (MTP)

Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection MTP prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the IOCTL interface...

CVE-2021-23891

McAfee Total Protection (MTP) before version 16.0.32 contains a local privilege escalation vulnerability. A local user can impersonate a client token to bypass MTP self-defense and gain elevated privileges. Affected component: token/auth handling within MTP. Root cause: impersonation of a client ...

Mcafee McAfee Total Protection 后置链接漏洞

McAfee Total Protection MTP is a one-stop security suite. An elevation of privilege vulnerability exists in the File Lock component of McAfee Total Protection prior to version 16.0.32. An attacker could use this vulnerability to elevate privileges by manipulating symbolic links in the IOCTL...

McAfee Total Protection 安全漏洞

McAfee Total Protection MTP is a one-stop security suite. An elevation of privilege vulnerability exists in McAfee Total Protection prior to version 16.0.32. An attacker could exploit this vulnerability to elevate privileges by emulating a client token...

Unauthorized Access Vulnerability in Electro Industries/GaugeTech Total Web Solutions

Electro Industries/GuageTech "EIG USA" is a manufacturer of microprocessor-based digital power meters. An unauthorized access vulnerability exists in Electro Industries/GuageTech Total Web Solutions. An attacker could exploit the vulnerability to obtain sensitive information...

Reward rates can be changed through flash borrows

Handle @cmichelio Vulnerability details Vulnerability Details The rewards per market are proportional to their totalBorrows which can be changed by a large holder who deposits lots of collateral, takes out a huge borrow in the market, updates the rewards, and then unwinds the position. They'll on...

WordPress W3 Total Cache plugin <= 2.1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress W3 Total Cache plugin versions = 2.1.2. Solution Update the WordPress W3 Total Cache plugin to the latest available version at least 2.1.3...

The vulnerability affects components of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud, Kaspersky Small Office Security, and Kaspersky Endpoint Security for Windows. This vulnerability allows attackers to elevate their privileges and execute arbitrary code.

The vulnerability of components such as Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Security Cloud, Kaspersky Small Office Security, and Kaspersky Endpoint Security for Windows relates to errors in permission and privilege management. Exploiting this...

The vulnerability in the implementation of UI processes of anti-virus protection solutions from Kaspersky – such as Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud – allows attackers to trigger a service failure.

The vulnerability of the UI implementation for anti-virus protection solutions from Kaspersky – including Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud – is related to deficiencies in the authentication...

Mozilla Patches Bugs in Firefox, Now Blocks Cross-Site Cookie Tracking

The Mozilla Foundation has released its latest version of the Firefox browser, which comes with new privacy protections to squash cross-site cookie tracking, as well as a slew of security vulnerability fixes. Firefox 86, released on Tuesday, includes what it touts as a privacy-bolstering feature...

Mozilla releases Firefox 86 equipped with ‘Total Cookie Protection’

By Habiba Rashid Mozilla has released Firefox 86 with various new features including Total Cookie Protection which is a huge privacy advancement for users. This is a post from HackRead.com Read the original post: Mozilla releases Firefox 86 equipped with ‘Total Cookie Protection’...

McAfee Total Protection Mismanaged Privileges Vulnerability

McAfee Total Protection MTP is a one-stop security suite. A privilege mismanagement vulnerability exists in McAfee Total Protection versions prior to 16.0.30. The vulnerability can be exploited to cause a denial of service by an attacker to elevate privileges and make arbitrary file changes with...

McAfee Total Protection Elevation of Privilege Vulnerability (CNVD-2021-12082)

McAfee Total Protection MTP is a one-stop security suite. An elevation of privilege vulnerability exists in McAfee Total Protection prior to version 16.0.30. A local attacker can exploit this vulnerability to elevate privileges and perform arbitrary file deletions with SYSTEM user privileges, whi...

McAfee Total Protection Arbitrary Process Execution Vulnerability

McAfee Total Protection MTP is a one-stop security suite. An arbitrary process execution vulnerability exists in McAfee Total Protection versions prior to 16.0.30. An attacker could exploit this vulnerability to bypass the MTP self-defense by elevating privileges and executing arbitrary code...

Information Disclosure

libslirp is vulnerable to information disclosure. A buffer over-read in slirp.c allows reading of a certain amount of header data pass the total packet length...