PT-2024-13022 · Win Zapp · Win Zapp

Name of the Vulnerable Software and Affected Versions: Win ZApp versions prior to 4.3.0 Description: The issue is related to an arbitrary file deletion in ZSATrayManager, which is responsible for protecting the temporary encrypted ZApp issue reporting file from unprivileged end user access and...

Malicious code in win-regi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccc75e5c2e245bb5cc93616df8345a066ad6a7b060d605404d8036f4a272b45b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1151 Malicious code in win-regi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccc75e5c2e245bb5cc93616df8345a066ad6a7b060d605404d8036f4a272b45b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the pvr2_context_disconnect() function in the drivers/media/usb/pvrusb2/pvrusb2-context.c file of the Hauppauge WinTV-PVR USB2 driver for the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pvr2contextdisconnect function in the drivers/media/usb/pvrusb2/pvrusb2-context.c file of the Hauppauge WinTV-PVR USB2 driver’s Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the...

BIT-PYTHON-2020-8315

In Python CPython 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected...

SMB Fetch, Windows x64 Pingback, Reverse TCP Inline

Fetch and execute an x64 payload from an SMB server. Connect back to attacker and report UUID Windows x64 Module Options msf use payload/cmd/windows/smb/x64/pingbackreversetcp msf payloadpingbackreversetcp show actions ...actions... msf payloadpingbackreversetcp set ACTION msf...

Malicious code in nan-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a48d06bf13608fbfa08f52c2b2b909075ad70973b7c46be713c54367decc178c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-963 Malicious code in nan-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a48d06bf13608fbfa08f52c2b2b909075ad70973b7c46be713c54367decc178c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-33116

Transient DOS while parsing ieee80211parsemscsie in WIN WLAN driver...

CVE-2023-33116 Buffer over-read without Checking Size of Input in WLAN Host

Transient DOS while parsing ieee80211parsemscsie in WIN WLAN driver...

CVE-2023-33116 Buffer over-read without Checking Size of Input in WLAN Host

Transient DOS while parsing ieee80211parsemscsie in WIN WLAN driver...

Shanghai Zhongyun Digital Win Cloud Computing Technology Co., Ltd Shanghai Old Cadre APP has Logic Flaw Vulnerability

Shanghai Old Cadre app is a senior activity software specially created for some party members and old cadres in Shanghai. Shanghai Zhongyun Digital Win Cloud Computing Technology Co. Shanghai Old Cadre App has a logic flaw vulnerability that can be exploited by attackers to cause SMS bombing...

WordPress Royal Elementor Addons Remote Code Execution Exploit

Exploit for the unauthenticated file upload vulnerability in WordPress Royal Elementor Addons and Templates plugin 'WordPress Royal Elementor Addons RCE', 'Description' = %q Exploit for the unauthenticated file upload vulnerability in WordPress Royal Elementor Addons and Templates plugin...

Use-After-Free in win_close() in vim

...

RUSTSEC-2023-0108 `tauri-win-rt-notification` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the user gabielle55131 to run an arbitrary malware payload on Windows hosts. This advisory is to retrospectively document this attempted attack. The version information and download records of the malicious crate are no longer...

`win-base64-rs` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the user Kraded to run an arbitrary malware payload on Windows hosts. This advisory is to retrospectively document this attempted attack. The version information and download records of the malicious crate are no longer available...

`registry-win` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the user Kraded to run an arbitrary malware payload on Windows hosts. This advisory is to retrospectively document this attempted attack. The version information and download records of the malicious crate are no longer available...

RUSTSEC-2023-0109 `win-crypto` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the user Kraded to run an arbitrary malware payload on Windows hosts. This advisory is to retrospectively document this attempted attack. The version information and download records of the malicious crate are no longer available...

RUSTSEC-2023-0116 `registry-win` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the user Kraded to run an arbitrary malware payload on Windows hosts. This advisory is to retrospectively document this attempted attack. The version information and download records of the malicious crate are no longer available...

`win-crypto` was removed from crates.io for malicious code

This crate was part of a typosquatting malware cluster published by the user Kraded to run an arbitrary malware payload on Windows hosts. This advisory is to retrospectively document this attempted attack. The version information and download records of the malicious crate are no longer available...