VMWare Workstation On Linux Privilege Escalation

This vulnerability permits an unprivileged user on a Linux machine on which VMWare Workstation is installed to gain root privileges. The issue is that, for VMs with audio, the privileged VM host process loads libasound, which parses ALSA configuration files, including one at /.asoundrc. libasound...

VMWare Workstation On Linux Privilege Escalation

VMWare Workstation on Linux: unprivileged host user - host root privesc via ALSA config CVE-2017-4915 This vulnerability permits an unprivileged user on a Linux machine on which VMWare Workstation is installed to gain root privileges. The issue is that, for VMs with audio, the privileged VM host...

CVE-2017-4915

creationtimestamp| type| source ---|---|--- 2017-05-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42045 2017-05-23 12:53:32+00:00| seen| https://t.me/webamoozir/1842 2018-05-29 15:50:33+00:00| seen|...

KLA11019 Multiple vulnerabilities in VMware products

Multiple serious vulnerabilities have been found in VMware Workstation Pro and VMware Workstation Player. Malicious users can exploit these vulnerabilities to gain privileges and cause a denial of service. Below is a complete list of vulnerabilities: 1. An insecure library loading vulnerability c...

VMSA-2017-0009:VMware Workstation update addresses multiple security issues

VMSA-2017-0009 VMware Workstation update addresses multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0009 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Workstation update addresses multiple security issues...

CVE-2015-4915

Technical details (affected product/version, root cause, impact, exploit information) are not publicly available in the provided documents; monitor for updates.

WordPress Plugin Google Document Embedder Arbitrary File Disclosure

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rbmysql' cla...

CVE-2012-4915

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to libs/pdf.php...

CVE-2012-4915

CVE-2012-4915 affects the Google Doc Embedder Plugin for WordPress. A directory-traversal in libs/pdf.php allows remote reading of arbitrary files via .. in the file parameter. Affected plugin versions are older than 2.5.4. Mitigation is to upgrade to 2.5.4 or later (or apply vendor-provided fixe...

CVE-2012-4915

creationtimestamp| type| source ---|---|--- 2013-01-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23970 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpgoogledocumentembedderexec.rb 2025-02-06...

WordPress Plugin Google Document Embedder - Arbitrary File Disclosure (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rbmysql' class Metasploit3 'WordPress Plugin...

Intersil (Boa) HTTPd Basic Authentication Password Reset

The Intersil extension in the Boa HTTP Server 0.93.x - 0.94.11 allows basic authentication bypass when the user string is greater than 127 bytes long. The long string causes the password to be overwritten in memory, which enables the attacker to reset the password. In addition, the malicious...

CVE-2010-4915

CVE-2010-4915 affects ColdGen ColdBookmarks 1.22, with a vulnerability in the index.cfm function where the BookmarkID parameter in an EditBookmark action enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. The issue is tied to improper handling of the BookmarkID in...

CVE-2010-4915

creationtimestamp| type| source ---|---|--- 2010-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14933...

CVE-2009-4915

CVE-2009-4915 affects Cisco ASA 5580 series devices running software prior to 8.1(2). The issue allows remote attackers to cause a denial of service (device reload) via unknown network traffic, demonstrated by a connection stress test (Bug CSCsq68451). Connected documents corroborate the same des...

VMSA-2008-0018 : VMware Hosted products and patches for ESX and ESXi resolve two security issues

a. A privilege escalation on 32-bit and 64-bit guest operating systems VMware products emulate hardware functions and create the possibility to run guest operating systems. A flaw in the CPU hardware emulation might allow the virtual CPU to incorrectly handle the Trap flag. Exploitation of this...

CVE-2008-4915

CVE-2008-4915 documents a privilege-escalation flaw in CPU hardware emulation across VMware products (Workstation, Player, Server, ESX/ESXi, and related variants) when running 32/64-bit guest OS. The trap-flag handling flaw allows an authenticated guest OS user to gain privileges on the guest OS....

VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0018 Synopsis: VMware Hosted products and patches for ESX and ESXi resolve two security issues Issue date: 2008-11-06 Updated on...

VMSA-2008-0018:VMware Hosted products and patches for ESX and ESXi resolve two security issues

VMSA-2008-0018 VMware Hosted products and patches for ESX and ESXi resolve two security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2008-0018 VMware Security Advisory Synopsis: VMware Hosted products and patches for ESX and ESXi resolve two security issues VMware...

CVE-2007-4915

The CVE-2007-4915 issue affects Boa 0.93.x to 0.94.11 with Intersil isl3893 extensions, where stack writes can overwrite memory locations used for string constants. This allows a remote attacker to change the admin password stored in memory through a long username in an HTTP Basic Authentication ...