https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 13:11:27 +0000 https://cve.radiocsirt.org/vuln/cve-2018-18435 <p>KioWare Server version 4.9.6 and older installs by default to &#34;C:\kioware_com&#34; with weak folder permissions granting any user full permission &#34;Everyone: (F)&#34; to the contents of the directory and it&#39;s sub-folders. In addition, the program installs a service called &#34;KWSService&#34; which runs as &#34;Localsystem&#34;, this will allow any user to escalate privileges to &#34;NT AUTHORITY\SYSTEM&#34; by substituting the service&#39;s binary with a malicious one.</p> <p>KioWare Server version 4.9.6 and older installs by default to &#34;C:\kioware_com&#34; with weak folder permissions granting any user full permission &#34;Everyone: (F)&#34; to the contents of the directory and it&#39;s sub-folders. In addition, the program installs a service called &#34;KWSService&#34; which runs as &#34;Localsystem&#34;, this will allow any user to escalate privileges to &#34;NT AUTHORITY\SYSTEM&#34; by substituting the service&#39;s binary with a malicious one.</p> https://cve.radiocsirt.org/vuln/cve-2018-18435