Cisco VPN Client 5.x < 5.0.07.0440 Untrusted Search Path DLL Privilege Escalation

The version of the Cisco VPN client installed on the remote host is 5.x prior to 5.0.07.0440. It is, therefore, affected by a flaw related to loading dynamic link library DLL files due to searching fixed paths that may not be trusted or under user control. A local attacker can exploit this, via a...

WinSMS 3.43 Local Privilege Escalation

Exploit Title: WinSMS 3.43 Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.winsms.co.za Software Link: https://www.winsms.co.za/products/bulk-sms-desktop-software/ Version:...

Windows Permissions Enforcement Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that Windows enforces permissions if an attacker loads a specially crafted DLL. A locally authenticated attacker who successfully exploited this vulnerability could run arbitrary code as a system administrator. An attacker could then insta...

KLA10870 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Windows. Malicious users can exploit these vulnerabilities to cause denial of service. execute arbitrary code, obtain sensitive information or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handling ca...

WinSCP 5.9.1 DLL Hijacking

Exploit Title: WinSCP DLL Hijacking Exploit shcore.dll Date: 03-09-2016 Author: Ashiyane Digital Security Team Vendor Homepage:http://winscp.net/ Software Link: http://winscp.net/download/WinSCP-5.9.1-Setup.exe Version:5.9.1 Tested on:Windows 7 Exploit by : Amir.ght...

OoVoo 3.7.1 DLL Hijacking

Exploit Title: OoVoo DLL Hijacking Author: Ashiyane Digital Security Team Vendor Homepage:http://www.oovoo.com/ Version: 3.7.1 Tested on:Windows 7 ---------------------------------------------------------------------------------------------------------- vulnerable DLLs :...

WhatsApp DLL Hijacking

Exploit Title: WhatsApp DLL Hijacking Date: 8-9-2016 Author: Ashiyane Digital Security Team Vendor Homepage:https://www.whatsapp.com software link: https://web.whatsapp.com/desktop/windows/release/ia32/WhatsAppSetup.exe Tested on:Windows 7...

Windows/x86 - Persistent Reverse Shell TCP (494 Bytes)

/ Title : Windows x86 persistent reverse shell tcp Author : Roziul Hasan Khan Shifat Date : 04-09-2016 Tested on : Windows 7 x86 / / Note : This program must be run as adminstrator for 1st time . otherwise it won't be persistent / / section .text global start start: xor ecx,ecx mov eax,fs:ecx+0x3...

Security Advisory - Multiple Security Vulnerabilities in Huawei HiSuite

Huawei HiSuite PC client software has an information leak vulnerability. The software provides the function for configuring the proxy server. The password textbox on the proxy configuration UI do not disable the password copy function. An attacker who can log in to the system can copy out the...

Foxit Reader < 8.0.2 Multiple Vulnerabilities

Binary data 9491.prm...

VMware Workstation 'HGFS' Feature Privilege Escalation Vulnerability - Windows

VMware Workstation is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Fusion 'HGFS' Feature Privilege Escalation Vulnerability - Mac OS X

VMware Fusion is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...

VMware Workstation 'HGFS' Feature Privilege Escalation Vulnerability - Linux

VMware Workstation is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Tools 'HGFS Feature' Privilege Escalation Vulnerability

VMware Tools is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:tools";...

VMware Workstation Player 'HGFS' Feature Privilege Escalation Vulnerability - Windows

VMware Workstation Player is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CP...

NMAP DLL Load Local Command Execution Vulnerability

NMAP is a network security tool for Network Discovery Network Discovery and Security Auditing Security Auditing, which is free software. A local command execution vulnerability exists in NMAP DLL loading, which could be exploited by an attacker to execute arbitrary script code within the context ...

Avira Free Antivirus DLL Hijacking

Hi @ll, Avira's free antivirus full package executable installers, aviraantivirusen-us.exe, aviraantivirusde-de.exe etc., available from , etc., have multiple vulnerabilities: 1. the full package executable installers really: self- extracting RAR archives extract their payload the real installer...

Flexera InstallAnywhere Privilege Escalation Vulnerability - Windows

Flexera InstallAnywhere is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MEGAsync 2.9.9 DLL Hijacking

Exploit Title: MEGAsync DLL Hijacking Exploit shcore.dll Date: 27-8-2016 Author: Amir.ght Vendor Homepage: https://mega.nz Software Link: https://mega.nz/MEGAsyncSetup.exe Version: 2.9.9 Tested on:Windows 7...

Flexera InstallAnywhere Privilege Escalation Vulnerability - Linux

Flexera InstallAnywhere is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...