Privilege Escalation – Page 3

Citrix Patch Releases – February 2023

Citrix earlier this week has released security fixes for multiple vulnerabilities in Virtual Apps and Desktops, and Workspace apps for Windows and Linux. The first vulnerability tracked as CVE-2023-24483, resides…

PravinKarthik February 18, 2023

VMware fixes High Severity Vulnerability in Workstation

VMware has fixed a high-severity privilege escalation flaw, tracked as CVE-2023-20854 with a CVSS score of 7.8, that impacts Workstation. An attacker can exploit the vulnerability to delete arbitrary files…

PravinKarthik February 3, 2023

Atlassian Jira Align Vulnerabilities

Researchers have discovered vulnerabilities in Atlassian Jira Align, a SaaS platform could allow users with access to the service to become application administrators, and then attack the Atlassian service. The…

PravinKarthik October 25, 2022

WatchGuard Firewall Vulnerabilities leads to Takeover

WatchGuard has patched several vulnerabilities in two main firewall brands that have been rated between medium and critical severity. Both the Firebox and XTM ranges were implicated earlier this year…

PravinKarthik September 5, 2022

Zoom patches a bug in Mac version

Zoom has issued a patch for a vulnerability that could lead to a system takeover. The vulnerability, tracked as CVE-2022-28756 with a CVSS of 8.8, was found in Zoom for…

PravinKarthik August 16, 2022

KrbRelayUp – Leveraging Privilege Escalation in Windows

A privilege escalation hacking tool, KrbRelayUp, was publicly disclosed on GitHub by security researcher Mor Davidovich last month. This tool is a wrapper that can streamline the use of some…

PravinKarthik May 26, 2022

WordPress Jupiter Plugin bug could lead to Privilege Escalation

WordPress security analysts have discovered a set of vulnerabilities impacting the Jupiter Theme and JupiterX Core plugins for WordPress, one of which is a critical privilege escalation flaw. Jupiter is…

PravinKarthik May 19, 2022

Security

Years of old bugs came to haunt Avast and AVG

Researchers discovered two high-severity security vulnerabilities, tracked as CVE-2022-26522 and CVE-2022-26523, that affect a driver used by Avast and AVG antivirus solutions. AV products run as privileged services on Windows…

PravinKarthik May 7, 2022