CVE-2015-8150

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file...

CVE-2015-8150: Undefined Security Weakness

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file...

PT-2016-3860

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue allows local users to obtain root access by modifying a batch file. Recommendations For Symantec Encryption Management Server SEMS version 3.3.2, apply...

WinRAR may insecurely load executable files

Overview WinRAR contains a function where user specified files on the local disk can be executed. When this file does not have a file extension, a file of the same name with a file extension contained in the same folder may be executed by WinRAR instead of the user specified file. WinRAR also...

CVE-2015-0527

EMC Documentum xCelerated Management System xMS 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform xCP provisioning, which allows local users to obtain sensitive information by reading a file...

Design/Logic Flaw

EMC Documentum xCelerated Management System xMS 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform xCP provisioning, which allows local users to obtain sensitive information by reading a file...

CVE-2015-0527: Exposure of Sensitive Information to an Unauthorized Actor

EMC Documentum xCelerated Management System xMS 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform xCP provisioning, which allows local users to obtain sensitive information by reading a file...

EMC Documentum xCelerated Management System Information Disclosure Vulnerability

EMC Documentum xCelerated Management System xMS is an EMC technology that simplifies and accelerates the deployment of Documentum content management system into VMware-based private cloud environments. An information disclosure vulnerability exists in the EMC Documentum xCelerated Management...

PT-2015-4691

Name of the Vulnerable Software and Affected Versions EMC Documentum xCelerated Management System xMS version 1.1 before P14 Description The issue allows local users to obtain sensitive information by reading a file, as cleartext Windows Service credentials are stored in a batch file during...

Microsoft Windows 8.1 (x86x64) - User Profile Service Privilege Escalation (MS15-003)

Microsoft Windows 8.1 x86x64 - User Profile Service Privilege Escalation MS15-003 Source: https://code.google.com/p/google-security-research/issues/detail?id=123 Platform: Windows 8.1 Update 32/64 bit No other OS tested When a user logs into a computer the User Profile Service is used to create...

Metainfo Sendmail 2.0/2.5,MetaIP 3.1

No description provided by source. source: http://www.securityfocus.com/bid/110/info MetaInfo www.metainfo.com puts out many NT service products, including MetaIP DHCP/DNS manager and Sendmail Unix port. Both products allow remote administration via Web UIs, and MetaIP uses Java to communicate ba...

Apache Win32 1.3.x/2.0.x Batch File Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4335/info Special characters such as | may not be filtered by the batch file handler when a web request is made for a batch file. As a result, a remote attacker may be able to execute arbitrary commands on the host runnin...

Opera 7.22 - File Creation and Execution Exploit (Webserver)

No description provided by source. !/usr/bin/perl Sample code of Opera 7 Arbitrary File Auto-Saved Vulnerability. This Exploit will run a webserver that will create and execute a batch file on the victim's computer when visiting this malicious server This perl script is a small HTTP server for a...

Chilkat Software FTP2 ActiveX Component Remote Code Execution

No description provided by source. !-- Chilkat Software FTP2 ActiveX Component ChilkatFtp2.DLL 2.6.1.1 Remote Code Execution poc by rgod tested against Internet Explorer 7 on Vista should also work with 8/9 ActiveX Settings: CLSID: 302124C4-30A0-484A-9C7A-B51D5BA5306B Progid:...

CVE-2011-4525

Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a client system, and execute this batch file, via unspecified vectors...

Code injection

Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a client system, and execute this batch file, via unspecified vectors...

CVE-2011-4525

Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a client system, and execute this batch file, via unspecified vectors...

CVE-2011-4525

CVE-2011-4525 affects Advantech/BroadWin WebAccess prior to 7.0. A remote attacker can cause the client to create and execute a batch file by injecting arbitrary web content, enabling potential remote code execution. ICS-CERT notes Advantech released WebAccess 7.0 to address most vulnerabilities;...

PT-2012-1903

Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess versions prior to 7.0 Description The issue allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a client system and execute this batch file. Recommendations For versions...

CVE-2011-4525: Undefined Security Weakness

Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a client system, and execute this batch file, via unspecified vectors...