49 matches found
Microsoft Windows Win32k Elevation of Privilege (MS16-151: CVE-2016-7259)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is caused when the Windows kernel-mode fails to properly handle objects in memory. Successful exploitation would lead to write access violation...
ZTE ADSL ZXV10 W300 Authorization / Disclosure / Backdoor
Exploit Title: ZTE ADSL ZXV10 W300 modems - Multiple vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.zte.com.cn Versions Reported: W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 CVE-ID: CVE-2015-7257 CVE-2015-7258 CVE-2015-7259 Note: Large deployment size, primarily in Peru, used b...
ZTE ADSL ZXV10 W300 Modems - Multiple Vulnerabilities
ZTE ADSL ZXV10 W300 Modems - Multiple Vulnerabilities Exploit Title: ZTE ADSL ZXV10 W300 modems - Multiple vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.zte.com.cn Versions Reported: W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 CVE-ID: CVE-2015-7257 CVE-2015-7258 CVE-2015-7259...
ZTE ADSL Authorization Bypass / Information Disclosure
ZTE ADSL modems - Multiple vulnerabilities Confirmed on 2 of multiple software versions - W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 1 Insufficient authorization controls CVE-ID: CVE-2015-7257 Observed in Password Change functionality. Other functions may be vulnerable as well. Expected behavior...
CVE-2014-7259
The CVE-2014-7259 entry concerns SQUARE ENIX’s Kaku-San-Sei Million Arthur for Android (prior to 2.25). The issue is an information-management vulnerability that allows an attacker with a crafted app to gain privileges by accessing product credentials stored on the SD card. Affected product/versi...
CVE-2013-7259
Multiple cross-site request forgery CSRF vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to 1 db/data/ext/GremlinPlugin/graphdb/executescript or 2 db/manage/server/console/...
CVE-2013-7259
CVE-2013-7259 refers to multiple CSRF vulnerabilities in Neo4j 1.9.2. The flaw allows remote attackers to hijack administrator authentication and perform requests that can execute arbitrary code, demonstrated via (1) db/data/ext/GremlinPlugin/graphdb/execute_script and (2) db/manage/server/consol...
