PEAKLIGHT Downloader Deployed in Attacks Targeting Windows with Malicious Movie Downloads

Cybersecurity researchers have uncovered a never-before-seen dropper that serves as a conduit to launch next-stage malware with the ultimate goal of infecting Windows systems with information stealers and loaders. "This memory-only dropper decrypts and executes a PowerShell-based downloader,"...

The vulnerability of the Routing and Remote Access Service (RRAS) on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Routing and Remote Access Service RRAS on Windows operating systems is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Arbitrary File Write

webcrack is vulnerable to Arbitrary File Write. The vulnerability is due to improper handling of path traversal sequences in module names in within the file bundle.ts, which allows attackers to overwrite files on Windows systems when using the unpack bundles and saving features...

North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

The North Korea-linked threat actor known as Moonstone Sleet has continued to push malicious npm packages to the JavaScript package registry with the aim of infecting Windows systems, underscoring the persistent nature of their campaigns. The packages in question, harthat-api and harthat-hash, we...

PDF-XChange Editor Out-of-Bounds Read Vulnerability (CNVD-2024-33582)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Memory Misreference Vulnerability

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A memory misreference vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Untrusted Pointer Dereference Vulnerability (CNVD-2024-33584)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an untrusted pointer dereference vulnerability that can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Type Obfuscation Vulnerability

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A type confusion vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Memory Corruption Vulnerability (CNVD-2024-33590)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A memory corruption vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Heap Buffer Overflow Vulnerability (CNVD-2024-33586)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor stack buffer overflow vulnerability (CNVD-2024-33502)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Remote Code Execution Vulnerability (CNVD-2024-33513)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A remote code execution vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Remote Code Execution Vulnerability (CNVD-2024-33511)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A remote code execution vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Memory Corruption Vulnerability (CNVD-2024-33522)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A memory corruption vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Remote Code Execution Vulnerability (CNVD-2024-33514)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A remote code execution vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute remote code...

CVE-2024-40644 gitoxide's gix-path can use a fake program files location

gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. gix-path can be tricked into running another git.exe placed in an untrusted location by a limited user account on Windows systems. Windows permits limited user accounts without administrative privileges to create new...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Microsoft Message Queuing Security Vulnerability

Microsoft Message Queuing is used to implement solutions for asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to obtain sensitive information. The following products and...

MSI Installer Flaw Enables Privilege Escalation on Windows Systems

...

Path Traversal

lollms is vulnerable to Path Traversal. The vulnerability is due to insufficient sanitization of user-supplied input in the sanitizepathfromendpoint and sanitizepath functions within lollmscore\lollms\security.py, enabling arbitrary file reading, particularly on Windows systems...