CVE-2020-7278

Exploiting incorrectly configured access control security levels vulnerability in ENS Firewall in McAfee Endpoint Security ENS for Windows prior to 10.7.0 April 2020 and 10.6.1 April 2020 updates allows remote attackers and local users to allow or block unauthorized traffic via pre-existing rules...

JetBrains PyCharm Information Disclosure Vulnerability

JetBrains PyCharm is an integrated development environment IDE for the Python language from the Czech company JetBrains. An information disclosure vulnerability exists in JetBrains PyCharm version 2019.2.5 and version 2019.3 Windows. The vulnerability stems from errors such as configuration durin...

Palo Alto Networks GlobalProtect Agent Code Issue Vulnerability

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, Inc. that provides firewall monitoring and threat prevention. GlobalProtect Agent is an agent program that provides firewall monitoring and threat prevention features. A code issue vulnerability...

TFW you-get-really-excited-you-patch-diffed-a-0day-used-in-the-wild-but-then-find-out-it-is-the-wrong-vuln

Posted by Maddie Stone, Project Zero INTRODUCTION I’m really interested in 0-days exploited in the wild and what we, the security community, can learn about them to make 0-day hard. I explained some of Project Zero’s ideas and goals around in-the-wild 0-days in a November blog post. On December’s...

FinalWire AIDA64 Code Execution Vulnerability

FinalWire AIDA64 is a system information, diagnostic and auditing program from the Hungarian company FinalWire that runs on the Microsoft Windows platform. A security vulnerability exists in the kerneld.sys file in FinalWire AIDA64 versions prior to 5.99. An attacker can exploit the vulnerability...

Foxit Studio Photo Resource Management Error Vulnerability

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A resource management error vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which originates from the program failing to veri...

Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-18403)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of TIF files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which results from the program failing to properly validate...

Foxit Studio Photo Buffer Overflow Vulnerability (CNVD-2020-18405)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A buffer overflow vulnerability exists in the processing of PSD files in Foxit Studio Photo 3.6.6.918 and earlier versions for Windows platforms, which results from the program failing to properly validate...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially crafted ARF or WRF file...

Install Python for Windows

This module places an embeddable Python3 distribution onto the target file system, granting pentesters access to a lightweight Python interpreter. This module does not require administrative privileges or user interaction with installation prompts. This module requires Metasploit:...

PT-2020-19365 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions 7.3.x through 7.3.14 PHP versions 7.4.x through 7.4.2 Description: The issue arises when extracting PHAR files on Windows using the phar extension. Certain content inside a PHAR file could lead to a one-byte read past the allocat...

Adobe Illustrator CC Memory Corruption Vulnerability (CNVD-2020-03924)

Illustrator CC is a vector graphics creation tool from Adobe. A memory corruption vulnerability exists in Adobe Illustrator CC 24.0 and earlier versions for Windows-based platforms, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Check Point Endpoint Security Client Backlink Vulnerability

Check Point Endpoint Security Client is an endpoint security protection software from Check Point Israel. A backlink vulnerability exists in versions of Check Point Endpoint Security Client prior to E82.10 for Windows-based platforms. The vulnerability originates from a network system or product...

CVE-2019-11049

In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations...

CVE-2019-1465

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1466, CVE-2019-1467...

UBUNTU-CVE-2019-13762

Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code...

Snatch Ransomware Reboots Windows in Safe Mode to Bypass Antivirus

Cybersecurity researchers have spotted a new variant of the Snatch ransomware that first reboots infected Windows computers into Safe Mode and only then encrypts victims' files to avoid antivirus detection. Unlike traditional malware, the new Snatch ransomware chooses to run in Safe Mode because ...

Code42 Software Code42 server code issue vulnerability

Code42 Software Code42 is an enterprise-class data protection system from Code42 Software. Code42 server is a server-side program for Code42 that detects insider threats and prevents data leakage and loss. A code issue vulnerability exists in Code42 Software Code42 server 7.0.2 and earlier versio...

Cisco Webex Teams Code Issue Vulnerability

Cisco Webex Teams is a team collaboration application from Cisco USA. The program includes video conferencing, group messaging and file sharing features. A code issue vulnerability exists in Cisco Webex Teams for Windows-based platforms, which stems from the program failing to adequately validate...

CVE-2019-16860

Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library DLL. The Code42 service could then load it at runtime, and potentially execute arbitrary code at an...