Unspecified Vulnerability in Micro Focus SuSE Linux Enterprise Server yast2-users

Micro Focus SuSE Linux Enterprise Server is an enterprise server version of the Linux operating system from Micro Focus in the United Kingdom. yast2-users is a user management module for the YaST openSUSE and SUSE Linux Enterprise Server System Installation and Configuration tool. tool for openSU...

CVE-2016-1601

yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors...

Default credentials

yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors...

CVE-2016-1601

yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors...

Secret Net 7 and Secret Net Studio 8 - Local Privilege Escalation

Secret Net 7 and Secret Net Studio 8 - Local Privilege Escalation Source: https://github.com/Cr4sh/secretnetexpl Secret Net 7 and Secret Net Studio 8 local privileges escalation exploit. 0day vulnerabilities in sncc0.sys kernel driver of Secrity Code products allows attacker to perform local...

Microsoft Windows - srv2.sys SMB Code Execution (Python) (MS09-050)

Microsoft Windows - srv2.sys SMB Code Execution Python MS09-050 EDB-Note: Source https://raw.githubusercontent.com/ohnozzy/Exploit/master/MS09050.py !/usr/bin/python This module depends on the linux command line program smbclient. I can't find a python smb library for smb login. If you can find...

Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050) Exploit

Exploit for windows platform in category remote exploits EDB-Note: Source https://raw.githubusercontent.com/ohnozzy/Exploit/master/MS09050.py !/usr/bin/python This module depends on the linux command line program smbclient. I can't find a python smb library for smb login. If you can find one, you...

Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050)

EDB-Note: Source https://raw.githubusercontent.com/ohnozzy/Exploit/master/MS09050.py !/usr/bin/python This module depends on the linux command line program smbclient. I can't find a python smb library for smb login. If you can find one, you can replace that part of the code with the smb login...

PT-2016-1175

Name of the Vulnerable Software and Affected Versions Secret Net and Secret Net Studio affected versions not specified Description The issue is related to a kernel driver vulnerability in the sncc0.sys driver, which is part of the Secret Net and Secret Net Studio information protection systems...

sys-con.com XSS vulnerability

Vulnerable URL: http://www.sys-con.com/latest/news/"'--; Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 38210 Google Pagerank| 5 VIP website status:| Yes...

Gentoo Security Advisory GLSA 201402-12

Gentoo Linux Local Security Checks GLSA 201402-12 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-6944: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to hijack the authentication of users for requests that execute arbitrary SQL commands via the cmd parameter to sys/sys/listaBD2.jsp...

PT-2015-7418

Name of the Vulnerable Software and Affected Versions JSP/MySQL Administrador Web version 1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that execute arbitrary SQL commands. This is achieved via the cmd parameter to the...

CVE-2015-6945: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to inject arbitrary web script or HTML via the bd parameter to sys/sys/listaBD2.jsp...

PT-2015-7060

Name of the Vulnerable Software and Affected Versions FortiClient versions prior to 5.2.4 Description The issue concerns the mdare64 48.sys, mdare32 48.sys, mdare32 52.sys, mdare64 52.sys, and Fortishield.sys drivers in FortiClient. These drivers do not properly restrict access to the API for...

CVE-2015-4077: Exposure of Sensitive Information to an Unauthorized Actor

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to read arbitrary kernel memory via a 0x22608C ioctl call...

CVE-2015-5737: Undefined Security Weakness

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, 4 mdare6452.sys, and 5 Fortishield.sys drivers in Fortinet FortiClient before 5.2.4 do not properly restrict access to the API for management of processes and the Windows registry, which allows local users to obtain a privileged handle to a P...

CVE-2015-5735: Undefined Security Weakness

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...

PT-2015-6410

Name of the Vulnerable Software and Affected Versions FortiClient versions prior to 5.2.4 Description The issue allows local users to read arbitrary kernel memory. This is achieved via a specific ioctl call, 0x22608C, to certain drivers, including mdare64 48.sys, mdare32 48.sys, mdare32 52.sys, a...

PT-2015-3339

Name of the Vulnerable Software and Affected Versions FreeBSD versions 9.3 through 10.1 Description The issue is related to the sys amd64 IRET Handler in the kernel, which is associated with insufficient access control. This can be exploited by a local attacker to gain privileges or cause a denia...