52 matches found
CVE-2012-3809
Samsung Kies before 2.5.0.120942711 has arbitrary directory modification...
CVE-2012-3809
Samsung Kies before 2.5.0.12094_27_11 is affected by multiple vulnerabilities linked to its ActiveX and firmware update components. CVE-2012-3809 (Arbitrary Directory Modification) arises from a flaw in CmdAgentLib within CmdAgent.dll (Samsung Kies External\FirmwareUpdate) that allows modificatio...
CVE-2019-6328
CVE-2019-6328 affects HP Support Assistant 8.7.50 and earlier. Connected exploit details describe a local privilege escalation via the HP Support Framework service: the HPSAObjUtil8 component changes permissions of XML files under C:\ProgramData\Hewlett-Packard\HP Support Framework\Logs\Temp\HPSA...
HPSBGN03620 rev. 4 - HP Support Assistant Escalation of Privilege Vulnerability
Potential Security Impact Elevation of privilege and unauthorized modification of directories or files. Source: HP, HP Product Security Response Team PSRT Reported by: Philippe Laulheret McAfee Advanced Threat Research, ManhNDd Bkav Corporation VULNERABILITY SUMMARY The vulnerability allows a use...
NTP Privilege Escalation
Source: http://www.halfdog.net/Security/2015/NtpCronjobUserNtpToRootPrivilegeEscalation/ Introduction Problem description: The cronjob script bundled with ntp package is intended to perform cleanup on statistics files produced by NTP daemon running with statistics enabled. The script is run as ro...
CVE-2016-5026
hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory...
CVE-2016-5026
CVE-2016-5026 affects OnionShare prior to version 0.9.1. The vulnerability allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory, enabling unintended changes to the hidden service configuration. Exploitation is described as local (no network vector provided)...
NTP - Local Privilege Escalation
NTP - Local Privilege Escalation Source: http://www.halfdog.net/Security/2015/NtpCronjobUserNtpToRootPrivilegeEscalation/ Introduction Problem description: The cronjob script bundled with ntp package is intended to perform cleanup on statistics files produced by NTP daemon running with statistics...
Astium VoIP PBX 2.1 build 25399 - Multiple VulnerabilitiesRemote Command Execution
Astium VoIP PBX 2.1 build 25399 - Multiple VulnerabilitiesRemote Command Execution !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...
JqueryUpload large file upload arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
Guess the solutions to catalog, direct access to the default. aspx you may need to modify the parameter uploadid,the specific capture can be seen, can not make the undefined） 2. Test upload, the capture 3. Modify the Upload Directory can be arbitrarily specified 4. Guessing file name: the server...
AOL Instant Messenger 4.x - Arbitrary File Creation
AOL Instant Messenger 4.x - Arbitrary File Creation source: https://www.securityfocus.com/bid/4526/info An issue has been reported, which could allow an AIM user to save files to arbitrary locations. Reportedly, this is achievable when a direct connection is made between two AIM users. Files that...
