https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 04:18:22 +0000 https://vulnerability.circl.lu/vuln/cnvd-2018-09221 cnvd-2018-09221 https://vulnerability.circl.lu/vuln/cnvd-2018-09221 https://vulnerability.circl.lu/vuln/fkie_cve-2018-10646 <p>CyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM privilege escalation vulnerability through the &#34;CG6Service&#34; service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The &#34;ConnectToVpnServer&#34; method accepts a &#34;connectionParams&#34; argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.</p> <p>CyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM privilege escalation vulnerability through the &#34;CG6Service&#34; service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The &#34;ConnectToVpnServer&#34; method accepts a &#34;connectionParams&#34; argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2018-10646 https://vulnerability.circl.lu/vuln/ghsa-537h-9xcq-rw7q <p>CyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM privilege escalation vulnerability through the &#34;CG6Service&#34; service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The &#34;ConnectToVpnServer&#34; method accepts a &#34;connectionParams&#34; argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.</p> <p>CyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM privilege escalation vulnerability through the &#34;CG6Service&#34; service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The &#34;ConnectToVpnServer&#34; method accepts a &#34;connectionParams&#34; argument that provides attacker control of the OpenVPN command line. An attacker can specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.</p> https://vulnerability.circl.lu/vuln/ghsa-537h-9xcq-rw7q https://vulnerability.circl.lu/vuln/gsd-2018-10646 gsd-2018-10646 https://vulnerability.circl.lu/vuln/gsd-2018-10646