5142c
721e7
18206
5b299
951a5
4d4fe
80

https://www.
virustotal.com/
gui/file/d73ea7
6f6f07f96b33
7335213418b5
8e3fbc7e4b51
9fec0ef3fbd19
c1d335d81/
details

Flash
Helper
Services
.exe

Flash
Helper
Service

PUA.Win.
Adware.Flashserv::
1201

121e1
634bf
18768
80242
7f0a1
3f039
a9

https://www.
virustotal.com/
gui/file/5fc600
351bade74c27
91fc526bca6b
b606355cc65
e5253f7f7912
54db58ee7fa/
details

AA_v3
.exe

AmmyyAdmin

W32.SPR:
Variant.22fn.1201

c2406
fc0fce
67ae7
9e625
01332
5e2a6
8

https://www.
virustotal.com/
gui/file/1c3ed4
60a7f78a43ba
b0ae575056d
00c629f35cf7
e72443b4e87
4ede0f305871/
details

SegurazoIC
.exe

Digital
Communications
Inc.

PUA.Win.
Adware.Ursu::
95.sbx.tg

56f11
ce911
9632b
a360e
5b3dd
0a89a
cd

https://www.
virustotal.com/
gui/file/d8b59
4956ed5483
6817e38b36
5dafdc69aa7
e07776f83d
d0f706278d
ef8ad2d1/
details

xme64-540
.exe

N/A

PUA.Win.
Tool.Coinminer::
100.sbx.tg

e2ea3
15d9a
83e75
77053
f52c9
74f6a
5a

https://www.
virustotal.com/
gui/file/c3e53
0cc005583b
47322b6649
ddc0dab1b6
4bcf22b124a
492606763c
52fb048f/
details

c3e530cc0
05583b47
322b6649
ddc0dab1b
64bcf22b1
24a49260
6763c52fb
048f.bin

N/A

W32.AgentWDCR:
Gen.21gn.1201

CVE-
2019-
16278

Nostromo
Web Server Unauthen-ticated Remote Code Execution Vulnerability

Nazgul

A remote code execution vulnerability exists in Nostromo Web Server. This issue is caused by a directory traversal in the function http_verify in nostromo nhttpd allowing an attacker to achieve remote code execution via a crafted HTTP request. After successful exploitation of this vulnerability an attacker can achieve remote code execution via a crafted HTTP request.

7.5(AV:
N/AC:
L/Au:
N/C:
P/I:
P/A:P)

10/14/2019

10/31/2019

CVE-
2019-
5596

FreeBSD Privilege Escalation Vulnerability

FreeBSD

In FreeBSD, a bug in the reference count implementation for UNIX domain sockets can cause a file structure to be incorrectly released potentially allowing a malicious local user to gain root privileges or escape from a jail. FreeBSD attempts to handle the case where the receiving process does not provide a sufficiently large buffer for an incoming control message containing rights. The code which performs this operation failed to release a reference obtained on the file corresponding to a received right. This bug can be used to cause the reference counter to wrap around and free the file structure.

7.2 (AV:
L/AC:
L/Au:
N/C:
C/I:
C/A:C)

02/12/2019

12/30/2019

CVE-
2019-
1405

Microsoft UPnP Local Privilege Elevation Vulnerability

Microsoft

An elevation of privilege vulnerability exists when the Windows Universal Plug and Play service improperly allows COM object creation. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges.

7.2(AV:
L/AC:
L/Au:
N/C:
C/I:
C/A:C)

11/12/2019

12/18/2019

CVE-
2019-
19726

OpenBSD Dynamic Loader chpass Privilege Escalation Vulnerability

Pulse Secure

Qualys discovered a local privilege escalation in OpenBSD's dynamic loader (ld.so). This vulnerability is exploitable in the default installation (via the set-user-ID executable chpass or passwd) and yields full root privileges. OpenBSD allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be defeated by setting a very small RLIMIT_DATA resource limit. When executing chpass or passwd (which are setuid root), _dl_setup_env in ld.so tries to strip LD_LIBRARY_PATH from the environment, but fails when it cannot allocate memory. Thus, the attacker is able to execute their own library code as root.

7.2(AV:
L/AC:
L/Au:
N/C:
C/I:
C/A:C)

12/11/2019

12/27/2019

CVE-
2019-
1184

Windows Shell COM Server Registrar Local Privilege Escalation Vulnerability

Microsoft

An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher level and thereby elevate permissions.

7.2(AV:
L/AC:
L/Au:
N/C:
C/I:
C/A:C)

08/14/2019

08/19/2019

CVE-
2019-
19844

Django count Hijack Vulnerability

Django

Django allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token for the matched user account. Django's password-reset form uses a case-insensitive query to retrieve accounts matching the email address requesting the password reset.

5.0(AV:
N/AC:
L/Au:
N/C:
N/I:
P/A:N)

12/18/2019

01/07/2020