CVE-2017-10125

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly...

CVE-2017-10125: Undefined Security Weakness

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly...

PT-2017-11122

Name of the Vulnerable Software and Affected Versions Java SE versions 7u141 and 8u131 Description The issue allows physical access to compromise Java SE, and successful attacks can result in the takeover of Java SE. It is difficult to exploit and may significantly impact additional products. The...

WordPress Companion Auto Update plugin <=2.9.3 - Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) Vulnerabilities

WordPress Companion Auto Update plugin Cross-Site Request Forgery CSRF and Cross-Site Scripting XSS vulnerability. The CSRF occurs when you try to change the plugin’s settings. There's no nonce to validate the request. The XSS vulnerability appears for "Email address" input field, the output is n...

Dell Customer Connect 1.3.28.0 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Dell Customer Connect 1.3.28.0 Privilege Escalation Date: 25.04.2017 Software Link: http://www.dell.com/ Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ Category: local 1...

Dell Customer Connect 1.3.28.0 - Local Privilege Escalation

Exploit Dell Customer Connect 1.3.28.0 Privilege Escalation Date: 25.04.2017 Software Link: http://www.dell.com/ Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ Category: local 1. Description DCCService.exe is running on autostart as...

Dell Customer Connect 1.3.28.0 - Local Privilege Escalation

Dell Customer Connect 1.3.28.0 - Local Privilege Escalation Exploit Dell Customer Connect 1.3.28.0 Privilege Escalation Date: 25.04.2017 Software Link: http://www.dell.com/ Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ Category: local...

Dell Customer Connect 1.3.28.0 Privilege Escalation

Exploit Dell Customer Connect 1.3.28.0 Privilege Escalation Date: 25.04.2017 Software Link: http://www.dell.com/ Exploit Author: Kacper Szurek Contact: https://twitter.com/KacperSzurek Website: https://security.szurek.pl/ Category: local 1. Description DCCService.exe is running on autostart as...

PloitKit - The Hacker's ToolBox

PloitKit is a Python based GUI tool designed as one-stop for all other softwares. I was facing these kinds of problem, when I need to switch to different system, or I lost my pen-drive. I have to go to google, and search every tool and download every tool and so on. So I decided to create a tool,...

OpenElec 6.0.3 / 7.0.1 Code Execution

During my research about update mechanisms of open-source software I discovered vulnerabilities in OpenElec. == OVERVIEW == System affected: OpenElec CVE: CVE-2017-6445 Vulnerable component: auto-update feature Software-Version: 6.0.3, 7.0.1 User-Interaction: Reboot required Impact: Remote Code...

OpenElec 6.0.3 / 7.0.1 Code Execution Vulnerability

Exploit for linux platform in category local exploits During my research about update mechanisms of open-source software I discovered vulnerabilities in OpenElec. == OVERVIEW == System affected: OpenElec CVE: CVE-2017-6445 Vulnerable component: auto-update feature Software-Version: 6.0.3, 7.0.1...

CVE-2017-6445

The auto-update feature of Open Embedded Linux Entertainment Center OpenELEC 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely...

Design/Logic Flaw

The auto-update feature of Open Embedded Linux Entertainment Center OpenELEC 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely...

CVE-2017-6445

The auto-update feature of Open Embedded Linux Entertainment Center OpenELEC 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely...

CVE-2017-6445

The auto-update feature of Open Embedded Linux Entertainment Center OpenELEC 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely...

CVE-2017-6445

OpenELEC has a CVE-2017-6445 issue affecting the auto-update feature in OpenELEC 6.0.3, 7.0.1, and 8.0.4. The update process uses neither encrypted connections nor signed updates, enabling a man-in-the-middle attacker to tamper with update packages and gain root access remotely. The description a...

PT-2017-17071

Name of the Vulnerable Software and Affected Versions OpenELEC versions 6.0.3, 7.0.1, 8.0.4 Description The issue concerns the auto-update feature, which lacks encrypted connections and signed updates. This allows a man-in-the-middle attacker to manipulate update packages, potentially gaining roo...

CVE-2017-6445: Missing Encryption of Sensitive Data

The auto-update feature of Open Embedded Linux Entertainment Center OpenELEC 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely...

Brave Software: No user confirmation when an auto-updated extension gets more permissions

Summary: In Chrome, when extensions are auto-updated, if the permissions change, the extension is preventatively disabled and the user has to confirm they wish to re-enable it with the additional permissions. While it appears Brave has a functioning Extension auto-updater e.g. for the PDF...

Microsoft Auto Updater for Mac Local Elevation of Privilege Vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. An elevation of privilege vulnerability exists in the Microsoft Auto Update MAU application for Mac that fails to properly validate updates before execution. The vulnerability can be...