Netdecision 5.8.2 - Local Privilege Escalation

// Netdecision.cpp : Defines the entry point for the console application. / Exploit Title: Netdecision 5.8.2 - Local Privilege Escalation - Winring0x32.sys Date: 2017.09.17 Exploit Author: Peter Baris Vendor Homepage: www.netmechanica.com Software Link: http://www.netmechanica.com/downloads/...

Buffer overflow

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to crash the OS via a malformed IOCTL call...

CVE-2017-6007

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to crash the OS via a malformed IOCTL call...

CVE-2017-6008

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to escalate privileges via a malformed IOCTL call...

CVE-2017-6007

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to crash the OS via a malformed IOCTL call...

CVE-2017-6007

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to crash the OS via a malformed IOCTL call...

Fedora 25 : mimedefang (2017-15ad4721e3)

MIMEDefang 2.81 =============== - Don't barf if the installed version of Sys::Syslog has a developer tag added like 0.3301 on Debian Stretch. - Make mimedefang and mimedefang-multiplexor write their PID files as root to avoid an unprivileged user tampering with the pidfiles. Thanks to Michael...

CVE-2017-6008: Improper Restriction of Operations within the Bounds of a Memory Buffer

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to escalate privileges via a malformed IOCTL call...

PT-2017-16827

Name of the Vulnerable Software and Affected Versions Sophos SurfRight HitmanPro versions prior to 3.7.20 Build 286 Description A kernel pool overflow in the driver hitmanpro37.sys allows local users to escalate privileges via a malformed IOCTL call. Recommendations For versions prior to 3.7.20...

PT-2017-16826

Name of the Vulnerable Software and Affected Versions Sophos SurfRight HitmanPro versions prior to 3.7.20 Build 286 Description A kernel pool overflow in the driver hitmanpro37.sys allows local users to crash the OS via a malformed IOCTL call. Recommendations For versions prior to 3.7.20 Build 28...

CVE-2017-6007: Improper Restriction of Operations within the Bounds of a Memory Buffer

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean allows local users to crash the OS via a malformed IOCTL call...

Fedora 26 : mimedefang (2017-77e8bc720a)

MIMEDefang 2.81 =============== - Don't barf if the installed version of Sys::Syslog has a developer tag added like 0.3301 on Debian Stretch. - Make mimedefang and mimedefang-multiplexor write their PID files as root to avoid an unprivileged user tampering with the pidfiles. Thanks to Michael...

Intel IQVW32.sys Diagnostic Driver Code Execution

The vulnerabilities of the diagnostic drivers Intel IQVW32.sys and IQVW64.sys exist due to insufficient validation of input data during the processing of IOCTL commands 0x80862013, 0x8086200B, 0x8086200F, 0x80862007. Exploiting these vulnerabilities can allow an attacker to cause service failures...

CVE-2017-13778

Fiyo CMS 2.0.7 has XSS in dapur\apps\appconfig\sysconfig.php via the sitename parameter...

PT-2017-13093

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0.7 Description The issue concerns a cross-site scripting XSS problem. It is related to the site name parameter in the /dapur/apps/app config/sys config.php endpoint. Recommendations For Fiyo CMS version 2.0.7, update the sy...

UBUNTU-CVE-2017-12961

There is an assertion abort in the function parseattributes in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service...

DEBIAN-CVE-2017-12961

There is an assertion abort in the function parseattributes in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service...

CVE-2017-12961

There is an assertion abort in the function parseattributes in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service...

PT-2017-12805

Name of the Vulnerable Software and Affected Versions GNU PSPP versions prior to 1.0.1 Description The issue is related to an assertion abort in the parse attributes function, located in the data/sys-file-reader.c file of the libpspp library. This can lead to a remote denial of service...

CVE-2017-12961: Improper Input Validation

There is an assertion abort in the function parseattributes in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 that will lead to remote denial of service...