406 matches found
CVE-2022-25943
CVE-2022-24934 Vulnerability Overview When installing WPS Office, the service program wpscloudsvr is installed with administrator privileges. This service is configured for manual start, but the access control list ACL attributes of the folder where the service program resides are misconfigured...
WPS-CVE-2022-24934
STAND WITH UKARINE Putin IS CRIMINAL! Warning THIS PROGRAM USE GENERIC WHICH IS INTRODUCED IN GO 1.18, UPGRADE YOUR COMPILER! CVE-2022-24934 Web Server for exploiting this vuln by utilizing wpsupdate.exe Fake WPS Update Server PoC Research Purpose Only. Download file Set the file you want to send...
WPS-CVE-2022-24934
Warning THIS PROGRAM USE GENERIC WHICH IS INTRODUCED IN GO 1.18, UPGRADE YOUR COMPILER! CVE-2022-24934 Web Server for exploiting this vuln by utilizing wpsupdate.exe Fake WPS Update Server PoC Research Purpose Only. Download file Set the file you want to send to client as environment variable:...
KINGSOFT-WPS-Office-LPE
JVN Advisory https://jvn.jp/en/vu/JVNVU90673830/ The following CVE number have been assigned: CVE-2022-25943 KINGSOFT WPS Office LPE WPS Office is an office suite for Microsoft Windows, macOS, Linux, iOS, Android, and HarmonyOS developed by Zhuhai-based Chinese software developer Kingsoft...
CVE-2022-24934
CVE-2022-24934 Vulnerability Overview WPS Office's updater wpsupdate.exe reads a custom update server address from the registry HKEYCURRENTUSER, downloads a custom update program, and executes it, leading to arbitrary code execution. Affected Versions WPS Office versions less than or equal to...
WPS Office improper access restriction to its named pipe
Overview WPS Office provided by WPS SOFTWARE PTE. LTD. contains a service program running background and providing certain functionalities to the other programs. This service program uses a named pipe to communicate with the other programs. The named pipe above is not properly protected and any...
CVE-2018-6390
The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 and 10.2.0.5978 does not validate the size of the source memory block before an copy call, which allows remote attackers to cause a denial of service access violation and application crash via a crafted a web page, b office...
EUVD-2018-18147
Malware in sbrugna...
EUVD-2018-17978
Malware in sbrugna...
EUVD-2018-19273
Malware in sbrugna...
EUVD-2020-17979
Malware in sbrugna...
EUVD-2017-9110
Malware in sbrugna...
EUVD-2025-8443
Malicious code in bioql PyPI...
EUVD-2024-53465
Malicious code in bioql PyPI...
EUVD-2025-14893
Malicious code in bioql PyPI...
EUVD-2024-35236
Malicious code in bioql PyPI...
EUVD-2021-27576
Malicious code in bioql PyPI...
EUVD-2023-35589
Malicious code in bioql PyPI...