Twinsoft, a Polish company founded in 2000, provides custom software development and cybersecurity technology.
by Twinsoft · twinsoft.eu · source ↗
All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, includin…
An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code execution.
The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution.
No datasheets, whitepapers, case studies, videos, or demos linked yet.