https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:15:47 +0000 https://vulnerability.circl.lu/vuln/cnvd-2018-09220 cnvd-2018-09220 https://vulnerability.circl.lu/vuln/cnvd-2018-09220 https://vulnerability.circl.lu/vuln/fkie_cve-2018-10645 <p>Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the &#34;VyprVPN&#34; service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The &#34;SetProperty&#34; method allows an attacker to configure the &#34;AdditionalOpenVpnParameters&#34; property and control the OpenVPN command line. Using the OpenVPN &#34;plugin&#34; parameter, an attacker may specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user. This attack may be conducted using &#34;VyprVPN Free&#34; account credentials and the VyprVPN Desktop Client.</p> <p>Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the &#34;VyprVPN&#34; service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The &#34;SetProperty&#34; method allows an attacker to configure the &#34;AdditionalOpenVpnParameters&#34; property and control the OpenVPN command line. Using the OpenVPN &#34;plugin&#34; parameter, an attacker may specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user. This attack may be conducted using &#34;VyprVPN Free&#34; account credentials and the VyprVPN Desktop Client.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2018-10645 https://vulnerability.circl.lu/vuln/ghsa-95r2-wrvc-pcfh <p>Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the &#34;VyprVPN&#34; service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The &#34;SetProperty&#34; method allows an attacker to configure the &#34;AdditionalOpenVpnParameters&#34; property and control the OpenVPN command line. Using the OpenVPN &#34;plugin&#34; parameter, an attacker may specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user. This attack may be conducted using &#34;VyprVPN Free&#34; account credentials and the VyprVPN Desktop Client.</p> <p>Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the &#34;VyprVPN&#34; service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The &#34;SetProperty&#34; method allows an attacker to configure the &#34;AdditionalOpenVpnParameters&#34; property and control the OpenVPN command line. Using the OpenVPN &#34;plugin&#34; parameter, an attacker may specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user. This attack may be conducted using &#34;VyprVPN Free&#34; account credentials and the VyprVPN Desktop Client.</p> https://vulnerability.circl.lu/vuln/ghsa-95r2-wrvc-pcfh https://vulnerability.circl.lu/vuln/gsd-2018-10645 gsd-2018-10645 https://vulnerability.circl.lu/vuln/gsd-2018-10645