HackAndPwn
Security & Vulnerability Researcher / Professional Penetration Tester

Home

  • CVE-2019-3637 - McAfee - Privilege Escalation

    Privilege Escalation vulnerability in McAfee FRP 5.x earlier than 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with elevated privileges.


  • CVE-2019-3621 - McAfee - Lock Screen Bypass

    Authentication protection bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLP Endpoint) for Windows 11.x prior to 11.3.0 allows a physical local user to bypass the Windows lock screen via DLP Endpoint processes being killed just prior to the screen being locked or when the screen is locked.


  • CVE-2018-10959 - BeyondTrust - Untrusted Search Path

    Mitre and NVD have recently made this 7.5 high severity CVE public, describing the vulnerability as an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker’s process launch.


  • CVE-2018-6689 - McAfee - Improper Authentication

    Authentication bypass vulnerability in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.x earlier than 10.0.510, and 11.0.x earlier than 11.0.600 allows attackers to bypass local security protection via specific conditions.


  • CVE-2018-6674 - McAfee - Improper Privilege Management

    When the process McTray.exe runs with elevated privileges, VSE might spawn a process inheriting the parent’s privileges. This issue exposes the system to be manipulated by an attacker.



     Page: 13 of 13     
buy me a coffee