vulnerability_exploitation | Detection.FYI

Exploitation of 7zip vulnerability - CVE-2022-29072

Aug 10, 2024 · attack.Exploitation for Privilege Escalation attack.T1068 ·
Share on:

Detects possible exploitation vulnerability CVE-2022-29072. This vulnerability is due to 7z.dll misconfiguration. When a .7z file is placed in the Help > Contents area of the current Windows version 21.07, anyone with access to the host can elevate privileges. The command creates a child process of 7zFM.exe.

Read More
Exploitation of Vulnerable VMware Horizon to LOG4J

Aug 10, 2024 · attack.initial_access attack.t1190 ·
Share on:

Detecting initial exploitation attempt against VMware Horizon deployments running vulnerable versions of Log4j.

Read More