Hashim Jawad

The issue allows users with standard privileges to delete arbitrary folders and files, potentially leading to a local privilege escalation attack. This is due to improper link resolution before file access, also known as 'Link Following'.

The issue allows users with standard privileges to create arbitrary folders and files, potentially leading to a local Denial of Service (DoS) attack due to improper link resolution before file access.

The issue is related to an arbitrary file overwrite or create attack, which can lead to a local Denial of Service (DoS) and, under specific conditions, elevation of privileges. It is also associated with the possibility of deleting arbitrary files in the system, potentially allowing an attacker to gain elevated privileges.

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.31.0 Description: The issue is related to a configuration flaw in the exec-path Docker daemon config option, allowing a user in the docker-users group to cause a Windows Denial-of-Service in Windows containers mode. This is due to inadequate access control. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. The vulnerability can be exploited through the `exec-path` Docker daemon config option, which is a part of the Docker Desktop platform for developing and delivering containerized applications. Recommendations: For Docker Desktop versions prior to 4.31.0, update to version 4.31.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `exec-path` Docker daemon config option to minimize the risk of exploitation.

The issue is related to incorrect link resolution before accessing a file in the DEP Manager component of Trend Micro VPN Proxy One Pro for Windows. This can allow an attacker to elevate their privileges under specific conditions. The vulnerability may lead to arbitrary file overwrite, resulting in privilege escalation.

The issue involves overly permissive folders in a key directory, which could allow a local attacker to obtain privilege escalation on an affected system.

The issue concerns a vulnerability in the ShadowPlay component of NVIDIA GeForce Experience, potentially leading to local privilege escalation, code execution, denial of service, or information disclosure.

The issue is related to the mishandling of Symbolic Links during updates, which can cause elevation of privileges.

The issue allows any standard user to escalate privileges to NT AUTHORITYSYSTEM by substituting the IDriveService binary with a malicious one due to weak folder permissions. The program installs by default to %PROGRAMFILES(X86)%IDriveWindows with permissions granting any user modify permission to the directory and its sub-folders. The IDriveService runs as LocalSystem, enabling privilege escalation.

The issue allows local non-privileged users to access sensitive operations, including mapping and un-mapping of physical memory, reading and writing to Model Specific Register (MSR) registers, and input from and output to I/O ports. This exposure leads to privilege escalation to NT AUTHORITYSYSTEM.

The issue allows for local privilege escalation and arbitrary file writes due to mishandling of diagnostics collection with Administrator privileges. Additionally, there is a problem with insufficient validation or encoding of user-supplied input in graphing scripts, which can lead to injection of RRDtool syntax and various attacks, including disclosure of directory structure and filenames, file content, denial of service, or writing arbitrary files. The `html/graph.php` script and parameters like `html/includes/graphs/common.inc.php` and `html/includes/graphs/graphs.inc.php` are affected.

The issue allows local non-privileged users to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITYSYSTEM privileges, via a function call such as MmMapIoSpace. This is due to a flaw in the CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers. Researchers from Activecyber identified this issue, which could lead to privilege escalation.

The issue allows local users, including those with low integrity processes, to read and write to arbitrary memory locations. This can lead to the gain of NT AUTHORITYSYSTEM privileges by mapping DevicePhysicalMemory into the calling process via `ZwOpenSection` and `ZwMapViewOfSection` functions.

The issue is related to insecure permissions on certain directories and sub-folders, specifically `%PROGRAMDATA%Netwrix AuditorLogsActiveDirectory`. The `Netwrix.ADA.StorageAuditService` service, which writes to this directory, does not properly impersonate, resulting in the target file having the same permissions as the invoking process. This allows low-privileged users to perform DLL Hijacking/Binary Planting attacks, potentially executing code as `NT AUTHORITYSYSTEM` with the help of Symbolic Links.

The issue is related to improper permissions on the C:PandoraFMS directory and its sub-folders, allowing standard users to create new files. When the Apache service httpd.exe receives web requests to the portal, it attempts to execute cmd.exe from the C:PandoraFMS directory as NT AUTHORITYSYSTEM. This allows non-privileged users to escalate privileges to NT AUTHORITYSYSTEM.

The issue is related to local privilege escalation due to improper permissions for the %SYSTEMDRIVE%ManageEngine directory and its sub-folders. Services associated with the affected products try to execute binaries such as `sc.exe` from the current directory upon system start, allowing non-privileged users to escalate privileges to NT AUTHORITYSYSTEM.

A vulnerability exists due to unsafe search paths used by the application URI, allowing an attacker to execute arbitrary commands on a targeted system. An attacker could exploit this by convincing a targeted user to follow a malicious link, causing the application to load libraries from the directory targeted by the URI link. This could allow the attacker to execute arbitrary commands on the system with the privileges of the targeted user, if the attacker can place a crafted library in a directory that is accessible to the vulnerable system.

The issue allows remote code execution in the Qt framework.

The issue concerns weak folder permissions in the default installation directory, granting any user full access to the directory and its sub-folders. Additionally, a service called KWSService runs as Localsystem, allowing any user to potentially escalate privileges to NT AUTHORITYSYSTEM by substituting the service's binary with a malicious one.

The issue allows local users to gain privileges by replacing an executable file with a Trojan horse, due to the "Everyone: (F)" permission for %PROGRAMFILES%SeqriteSeqrite.