Privilege escalation

In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation...

PT-2021-10797

Name of the Vulnerable Software and Affected Versions Windscribe version 1.83 Build 20 Description The issue is related to an Unquoted Service Path in the 'WindscribeService' of Windscribe, which can facilitate privilege escalation. Recommendations For Windscribe version 1.83 Build 20, consider...

CVE-2020-22809: Unquoted Search Path or Element

In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation...

CVE-2020-27518

All versions of Windscribe VPN for Mac and Windows = v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low privilege user could leverage several openvpn options to execute code as root/SYSTEM...

CVE-2020-27518: Improper Privilege Management

All versions of Windscribe VPN for Mac and Windows = v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low privilege user could leverage several openvpn options to execute code as root/SYSTEM...

PT-2021-11399

Name of the Vulnerable Software and Affected Versions: Windscribe VPN for Mac and Windows versions = 2.02.10 Description: The issue concerns a local privilege escalation vulnerability in the WindscribeService component. This vulnerability allows a low-privilege user to potentially execute code as...

Windscribe WindscribeService Named Pipe Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windscribe WindscribeService Named Pipe Privilege Escalation', 'Description' = %q The Windscribe VPN client application for Windows makes use of ...

PT-2018-10598 · Windscribe +1 · Windscribe +1

Name of the Vulnerable Software and Affected Versions: Windscribe version 1.81 Description: The issue concerns the VPN component in Windscribe, which uses the OpenVPN client and creates a system process named WindScribeService.exe. This process establishes a named pipe endpoint,...

WindScribe Denial of Service Vulnerability

WindScribe is a suite of VPN software for anonymously connecting to the Internet. A security vulnerability exists in WindScribe version 1.81. An attacker can exploit this vulnerability with the help of \pipe\WindscribeService URL to gain access or cause a denial of service. \pipe\WindscribeServic...

CVE-2018-11334: Incorrect Permission Assignment for Critical Resource

Windscribe 1.81 creates a named pipe with a NULL DACL that allows Everyone users to gain privileges or cause a denial of service via \.\pipe\WindscribeService...