CVE-2017-14311

The CVE-2017-14311 entry concerns the Winring0x32.sys driver in NetMechanica NetDecision 5.8.2. The connected sources confirm a local privilege escalation via a crafted 0x9C402088 IOCTL call, enabling a local attacker to gain privileges. Documents identify the affected component as the Winring0x3...

PT-2017-13382

Name of the Vulnerable Software and Affected Versions NetDecision version 5.8.2 Description The issue allows local users to gain privileges through a crafted 0x9C402088 IOCTL call to the Winring0x32.sys driver. Recommendations For NetDecision version 5.8.2, consider restricting access to the...

CVE-2017-14311: Undefined Security Weakness

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call...

Netdecision 5.8.2 - Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits // Netdecision.cpp : Defines the entry point for the console application. / Exploit Title: Netdecision 5.8.2 - Local Privilege Escalation - Winring0x32.sys Date: 2017.09.17 Exploit Author: Peter Baris Vendor Homepage: www.netmechanica.com...

Netdecision 5.8.2 - Local Privilege Escalation

Netdecision 5.8.2 - Local Privilege Escalation // Netdecision.cpp : Defines the entry point for the console application. / Exploit Title: Netdecision 5.8.2 - Local Privilege Escalation - Winring0x32.sys Date: 2017.09.17 Exploit Author: Peter Baris Vendor Homepage: www.netmechanica.com Software...

Netdecision 5.8.2 - Local Privilege Escalation

// Netdecision.cpp : Defines the entry point for the console application. / Exploit Title: Netdecision 5.8.2 - Local Privilege Escalation - Winring0x32.sys Date: 2017.09.17 Exploit Author: Peter Baris Vendor Homepage: www.netmechanica.com Software Link: http://www.netmechanica.com/downloads/...

CVE-2017-6007

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to crash the OS via a malformed IOCTL call...

CVE-2017-6008

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to escalate privileges via a malformed IOCTL call...

Buffer overflow

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to crash the OS via a malformed IOCTL call...

CVE-2017-6007

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to crash the OS via a malformed IOCTL call...

CVE-2017-6007

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to crash the OS via a malformed IOCTL call...

PT-2017-16827

Name of the Vulnerable Software and Affected Versions Sophos SurfRight HitmanPro versions prior to 3.7.20 Build 286 Description A kernel pool overflow in the driver hitmanpro37.sys allows local users to escalate privileges via a malformed IOCTL call. Recommendations For versions prior to 3.7.20...

PT-2017-16826

Name of the Vulnerable Software and Affected Versions Sophos SurfRight HitmanPro versions prior to 3.7.20 Build 286 Description A kernel pool overflow in the driver hitmanpro37.sys allows local users to crash the OS via a malformed IOCTL call. Recommendations For versions prior to 3.7.20 Build 28...

CVE-2017-6007: Improper Restriction of Operations within the Bounds of a Memory Buffer

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to crash the OS via a malformed IOCTL call...

Fedora 26 : mimedefang (2017-77e8bc720a)

MIMEDefang 2.81 =============== - Don't barf if the installed version of Sys::Syslog has a developer tag added like 0.3301 on Debian Stretch. - Make mimedefang and mimedefang-multiplexor write their PID files as root to avoid an unprivileged user tampering with the pidfiles. Thanks to Michael...

CVE-2017-6008: Improper Restriction of Operations within the Bounds of a Memory Buffer

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to escalate privileges via a malformed IOCTL call...

Fedora 25 : mimedefang (2017-15ad4721e3)

MIMEDefang 2.81 =============== - Don't barf if the installed version of Sys::Syslog has a developer tag added like 0.3301 on Debian Stretch. - Make mimedefang and mimedefang-multiplexor write their PID files as root to avoid an unprivileged user tampering with the pidfiles. Thanks to Michael...

The vulnerabilities of the diagnostic drivers for Intel IQVW32.sys and IQVW64.sys allow a hacker to trigger a service failure or execute arbitrary code.

The vulnerabilities of the diagnostic drivers Intel IQVW32.sys and IQVW64.sys exist due to insufficient validation of input data during the processing of IOCTL commands 0x80862013, 0x8086200B, 0x8086200F, 0x80862007. Exploiting these vulnerabilities can allow an attacker to cause service failures...

CVE-2017-13778

Fiyo CMS 2.0.7 has XSS in dapur\apps\appconfig\sysconfig.php via the sitename parameter...

PT-2017-13093

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue concerns a cross-site scripting XSS problem. It is related to the site name parameter in the /dapur/apps/app config/sys config.php endpoint. Recommendations For Fiyo CMS version 2.0.7, update the sy...