EUVD-2018-18218

Malware in sbrugna...

WINCVS 2009R2 DLL Hijacking

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVS-SUITE-2009R2-INSECURE-LIBRARY-LOADING-CVE-2018-6461.txt + ISR: Apparition Security Vendor: ============= march-hare.com Product: =========== WINCVS 2009R2 CVS Suite is a...

CVS Suite 2009R2 / Insecure Library Loading Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ============= march-hare.com Product: =========== WINCVS 2009R2 CVS Suite is a modern versioning system that combines the power and stability of CVS with modern easy to use client software and suppo...

Directory traversal

March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory...

CVE-2018-6461

March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory...

CVE-2018-6461

March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory...

CVE-2018-6461

The CVE-2018-6461 issue involves March Hare WINCVS (pre-2.8.01 build 6610) and CVS Suite (pre-2009R2 build 6610). The root cause is Insecure Library Loading via a Trojan DLL (Python or TCL) placed in the current working directory, targeting wincvs2.exe or wincvs.exe. This enables a local attacker...

CVE-2018-6461

March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory...

March Hare WINCVS and CVS Suite Insecure Library Loading Vulnerability

March Hare WINCVS and CVS Suite are both products of March Hare Australia, March Hare WINCVS is a Windows-based version control system and CVS Suite is a suite of version control systems. A security vulnerability exists in the wincvs2.exe or wincvs.exe file in March Hare WINCVS prior to version...

CVSNT 2.0.51d Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ====================== www.march-hare.com www.wincvs.org cvsgui.sourceforge.net Product: ============== CVSNT v2.0.51d Is part of "WinCvs" install zip archive. The CVSNT Versioning System implements...

CVSNT 2.0.51d Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVSNT-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ====================== www.march-hare.com www.wincvs.org cvsgui.sourceforge.net Product: ============== CVSNT...

WinCvs 2.1.1.1 Build 1 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ====================== cvsgui.sourceforge.net www.wincvs.org Product: =========== WinCvs v2.1.1.1 Build 1 downloads as wincvs-2.0.2.4 v2.0.2.4 WinCVS is a free app for Windows that will help you...

WinCvs 2.1.1.1 Build 1 Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WINCVS-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ====================== cvsgui.sourceforge.net www.wincvs.org Product: =========== WinCvs v2.1.1.1 Build 1...