Mar 9, 2022 | CVE, Vulnerability
CVE – pending – Vulnerable software PlugFree Network Version <= 7.3.0.3 Vulnerability An unquoted service path allows a possible extension of rights at the system level. Timeline 28.10.2021 Manufacturer informed 22.11.2021 Manufacturer contacted again...
Mar 8, 2022 | CVE, Vulnerability
CVE – pending – Vulnerable software DSM Remote Version <= 6.3.1.1862 Vulnerability An unquoted service path allows a possible extension of rights at the system level. Timeline 29.10.2021 Manufacturer informed 10/30/2021 Manufacturer states that the...
Feb 9, 2022 | CVE, Vulnerability
CVE -pending- Vulnerable Software Remote Desktop Commander Suite Agent <= Version 4.8 Vulnerability Unquoted Service Path Vulnerability Time Line 12.11.2021 Vendor informed 10.12.2021 Vendor confirmed the issue and kindly ask for a release on 9th of February...
Jan 3, 2022 | CVE, exploit, Vulnerability
While doing my preperation for the OSCE i found an exploit for the coolpalyer+ version 2.19.1 from 2009. I decided to check this vulnerability in the recent software version (2.19.6) on my Windows 10 machine. The following post descripes the exploit development. 1....
Jan 3, 2022 | CVE, Vulnerability
Vulnerable Software FTP server 8.0f(g) Vulnerability Local Buffer Overflow (SEH protected)-> Code Execution time line 01/24/2018 Vendor informed 30.01.2018 Vendor reminded 12.02.2018 Software patched 20.02.2018 Vulnerability Disclose Description The free...
Dec 22, 2021 | CVE, Vulnerability
CVE pending Vulnerable Software HIDCCEMonitorSVC Version <= 5.2.4.3 Vulnerability A Unquoted service path in HIDCCEMonitorSVC software allows a local attacker to potentially escalate privileges to system level. Timeline 29.10.2021 Vendor informed10.11.2021 Vendor...
