Vladislav Berghici

A flaw exists within the `zabbixagent configwizard func` method that allows remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this issue. The root cause is the lack of proper validation of user-supplied input before it is used in a system call, potentially allowing an attacker to execute code in the context of the service account.

Remote authenticated attackers can execute arbitrary code on affected installations. The issue stems from insufficient validation of a user-supplied string within the `esensors websensor configwizard func()` function before it is used in a system call. This allows the attacker to execute code with the privileges of the service account.

A flaw exists within the monitoringwizard module that allows remote attackers to execute arbitrary code on affected installations of Nagios Host. Authentication is required for exploitation. The issue stems from insufficient validation of user-supplied input before it is used in a system call, potentially allowing an attacker to execute code within the context of the service account.

A flaw in Microsoft Exchange Server’s user interface can lead to the misrepresentation of critical information. This allows an unauthorized attacker to conduct spoofing attacks over a network. The issue enables attackers to affect the system through spoofing.

The issue is related to a link following local privilege escalation that could allow a local attacker to unintentionally delete privileged Trend Micro files, including its own.

The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a time-of-check to time-of-use (TOCTTOU) attack. This is achieved by exploiting the `TuneupSvc` in Avast Cleanup Premium on Windows 10 Pro x64.

The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a time-of-check to time-of-use (TOCTTOU) attack.

The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging the service to delete a directory. This is achieved by exploiting the `TuneupSvc.exe` in AVG TuneUp on Windows.

The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a time-of-check to time-of-use (TOCTTOU) attack. This is a local privilege escalation vulnerability in the NortonUtilitiesSvc service.

This issue allows local attackers to escalate privileges on affected installations of Wacom Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within WTabletServicePro.exe. By creating a symbolic link, an attacker can abuse the service to create an arbitrary file. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM.

The issue is a link following local privilege escalation vulnerability. It could allow a local attacker to unintentionally delete privileged Trend Micro files, including its own.

An uncontrolled search path issue allows a local attacker to escalate privileges on affected installations, but the attacker must first obtain the ability to execute low-privileged code on the target system.

This issue allows remote attackers to disclose sensitive information on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this, where the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSD files embedded in SKP files, resulting from the lack of proper validation of user-supplied data. This can lead to a read past the end of an allocated buffer, and an attacker can leverage this, in conjunction with other vulnerabilities, to execute arbitrary code in the context of the current process.

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2025.10 Description: An out-of-bounds write issue was discovered in the Open Design Alliance Drawings SDK. This issue can be triggered by reading a crafted DWF file and missing proper checks on received `SectionIterator` data, which can cause an unhandled exception. This may allow attackers to cause a crash, potentially enabling a denial-of-service attack or possible code execution. Recommendations: For versions prior to 2025.10, upgrade the affected component to a version that includes the fix for this issue. As a temporary workaround, consider restricting the handling of DWF files to minimize the risk of exploitation. Avoid using the `SectionIterator` data in the affected API endpoint until the issue is resolved.