2984 matches found
VulnCheck KEV: CVE-2014-4076
Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to 1 tcpip.sys or 2 tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability."...
DLA-584-1 libsys-syslog-perl - security update
Bulletin has no description...
Linux-PAM: Multiple vulnerabilities
Background Linux-PAM Pluggable Authentication Modules is an architecture allowing the separation of the development of privilege granting software from the development of secure and appropriate authentication schemes. Description Multiple vulnerabilities have been discovered in Linux-PAM. Please...
PT-2016-2096
Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3 before p42 FreeBSD versions 10.1 before p34 FreeBSD versions 10.2 before p17 FreeBSD versions 10.3 before p3 Description The issue is caused by an integer signedness error in the genkbd commonioctl function, located in...
Unspecified Vulnerability in Micro Focus SuSE Linux Enterprise Server yast2-users
Micro Focus SuSE Linux Enterprise Server is an enterprise server version of the Linux operating system from Micro Focus in the United Kingdom. yast2-users is a user management module for the YaST openSUSE and SUSE Linux Enterprise Server System Installation and Configuration tool. tool for openSU...
Default credentials
yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors...
CVE-2016-1601
yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors...
CVE-2016-1601
yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors...
Secret Net 7 and Secret Net Studio 8 - Local Privilege Escalation
Secret Net 7 and Secret Net Studio 8 - Local Privilege Escalation Source: https://github.com/Cr4sh/secretnetexpl Secret Net 7 and Secret Net Studio 8 local privileges escalation exploit. 0day vulnerabilities in sncc0.sys kernel driver of Secrity Code products allows attacker to perform local...
Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050) Exploit
Exploit for windows platform in category remote exploits EDB-Note: Source https://raw.githubusercontent.com/ohnozzy/Exploit/master/MS09050.py !/usr/bin/python This module depends on the linux command line program smbclient. I can't find a python smb library for smb login. If you can find one, you...
Microsoft Windows - srv2.sys SMB Code Execution (Python) (MS09-050)
Microsoft Windows - srv2.sys SMB Code Execution Python MS09-050 EDB-Note: Source https://raw.githubusercontent.com/ohnozzy/Exploit/master/MS09050.py !/usr/bin/python This module depends on the linux command line program smbclient. I can't find a python smb library for smb login. If you can find...
Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050)
EDB-Note: Source https://raw.githubusercontent.com/ohnozzy/Exploit/master/MS09050.py !/usr/bin/python This module depends on the linux command line program smbclient. I can't find a python smb library for smb login. If you can find one, you can replace that part of the code with the smb login...
PT-2016-1175
Name of the Vulnerable Software and Affected Versions Secret Net and Secret Net Studio affected versions not specified Description The issue is related to a kernel driver vulnerability in the sncc0.sys driver, which is part of the Secret Net and Secret Net Studio information protection systems...
sys-con.com XSS vulnerability
Vulnerable URL: http://www.sys-con.com/latest/news/"'--; Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 38210 Google Pagerank| 5 VIP website status:| Yes...
Gentoo Security Advisory GLSA 201402-12
Gentoo Linux Local Security Checks GLSA 201402-12 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
PT-2015-7418
Name of the Vulnerable Software and Affected Versions JSP/MySQL Administrador Web version 1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that execute arbitrary SQL commands. This is achieved via the cmd parameter to the...
CVE-2015-6945: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to inject arbitrary web script or HTML via the bd parameter to sys/sys/listaBD2.jsp...
CVE-2015-6944: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to hijack the authentication of users for requests that execute arbitrary SQL commands via the cmd parameter to sys/sys/listaBD2.jsp...
PT-2015-6410
Name of the Vulnerable Software and Affected Versions FortiClient versions prior to 5.2.4 Description The issue allows local users to read arbitrary kernel memory. This is achieved via a specific ioctl call, 0x22608C, to certain drivers, including mdare64 48.sys, mdare32 48.sys, mdare32 52.sys, a...
PT-2015-7060
Name of the Vulnerable Software and Affected Versions FortiClient versions prior to 5.2.4 Description The issue concerns the mdare64 48.sys, mdare32 48.sys, mdare32 52.sys, mdare64 52.sys, and Fortishield.sys drivers in FortiClient. These drivers do not properly restrict access to the API for...