WRITEUP #993

Technical Advisory – Nullsoft Scriptable Installer System (NSIS) – Insecure Temporary Directory Usage

Privilege EscalationLocal Privilege Escalation

by@buffaloverflow(Richard Warren)

Program

Nullsoft Scriptable Installer System (NSIS)

Published

Jul 3, 2023

Added to HackDex

Jul 24, 2023

Read Full Writeuphttps://research.nccgroup.com/2023/07/03/technical-advisory-nullsoft-scriptable-installer-system-nsis-insecure-temporary-directory-usage/

▸ RELATED WRITEUPS

Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey

Privilege EscalationLocal Privilege Escalation

3CX Phone System Local Privilege Escalation Vulnerability

Privilege EscalationLocal Privilege Escalation

I hacked a card printer software (CVE-2024-34329)

Privilege EscalationLocal Privilege Escalation

Windows Installer, Exploiting Custom Actions

Privilege EscalationLocal Privilege Escalation

Identity Crisis: The Curious Case of a Delinea Local Privilege Escalation Vulnerability

Privilege EscalationLocal Privilege Escalation

Built with ❤️ by Shubham Rawat