CVE-2023-23697

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

Dell Command Integration Suite for System Center 后置链接漏洞

Dell Command Integration Suite for System Center is an easy-to-use GUI-based tool from Dell Dell. It is used to configure and deploy your Dell client system. A security vulnerability exists in Dell Command Integration Suite for System Center versions prior to 6.4.0, which originates from the...

Dell Command | Intel vPro Out of Band 后置链接漏洞

Dell Command | Intel vPro Out of Band is an application from Dell, Inc. that provides an out-of-band management solution. You are able to remotely manage client systems regardless of the power status of the system. A security vulnerability exists in Dell Command | Intel vPro Out of Band prior to...

Acronis Agent 安全漏洞

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Cyber Protect Home Office Windows versions prior to 40107, Acronis Agent Windows versions prior to 30025, and Acronis Cyber Protect 15 Windows versions prior to 30984, which originates from The...

CVE-2023-0001

An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agen...

CVE-2023-0001

An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agen...

CVE-2023-0002

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent...

Cortex XDR Agent: Cleartext Exposure of Agent Admin Password

An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agen...

Palo Alto Networks Cortex XDR 安全漏洞

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Cortex XDR that originates from a local user executing a...

PT-2023-1382 · Palo Alto Networks · Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Cortex XDR Agent versions affected versions not specified Description: The issue is related to a problem with a protection mechanism in the Cortex XDR agent on Windows devices, allowing a local user to execute privileged commands. This can...

MAL-2023-908 Malicious code in ts-messenger-api-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcd86ca9e67b7044c40aab4cc9d48b42d720f8c8ed5d0a1a19d3116874e7e517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VulnCheck KEV: CVE-2022-1654

Jupiter Theme = 6.10.1 and JupiterX Core Plugin = 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the "abbuninstalltemplate" both and "jupiterxcorecpuninstalltemplate" JupiterX Core Only AJAX actions...

Apple macOS Monterey 授权问题漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Monterey prior to version 12.6.3 and macOS Ventura prior to version 13.2, which stems from a logical issue where an encrypted volume may be uninstalled and...

MAL-2023-79 Malicious code in action-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f90778c15b41e8d153aaa97ddd19ece7aca4860fd7872ee3dfc6457f201f1433 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-4326

The CVE-2022-4326 issue affects Trellix Endpoint Agent (xAgent) on Windows prior to V35.31.22. A faulty removal-protection permissions scheme allows a local administrator to bypass protections and uninstall the agent. Affected component is the removal-protection mechanism within xAgent; root caus...

CVE-2022-4326 Trellix xAgent permission bypass vulnerability

Improper preservation of permissions vulnerability in Trellix Endpoint Agent xAgent prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality...

Trellix Agent 安全漏洞

Trellix Agent is a client component of FireEye USA Trellix, Inc. provides secure communication between McAfee ePolicy Orchestrator McAfee ePO and hosted products. A security vulnerability exists in versions of Trellix Agent prior to V35.31.22, which stems from the fact that it allows a local user...

Mattermost: Uninstalling Mattermost Launcher for Windows (64-bit), then reinstalling keeps you logged in without authentication

The Mattermost Desktop App for Windows 64-bit had a vulnerability where uninstalling and then reinstalling the app would automatically log the user back in without requiring authentication, allowing unauthorized access to the user's account and data. The uninstall process did not remove session...

Time to uninstall! Abandoned Android apps pack a vulnerability punch

Synopsis has published an advisory warning of multiple vulnerabilities across three different Android remote mouse and keyboard apps with a combined install count of about two million. The apps are at risk from remote code execution RCE, and theres no sign of a fix coming anytime, ever. Bleeping...

CVE-2022-1038

CVE-2022-1038 describes a potential privilege-escalation vulnerability in HP Jumpstart. The connected HP advisory indicates HP Jumpstart has been discontinued and replaced by the myHP software; HP recommends uninstalling Jumpstart and using myHP, with a Jumpstart Removal tool provided. Exploitati...