CVE-2019-19954

Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\nodemodules.bin\wmic.exe file...

F5 BIG-IP Local Traffic Manager Input Validation Error Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. Local Traffic Manager LTM is one of the local traffic managers. A security vulnerability exists in F5 BIG-IP LTM. An attacker could exploit this...

XnView 2.49.1 - (Research) Denial of Service Exploit

Exploit Title: XnView 2.49.1 - 'Research' Denial of Service PoC Exploit Author : ZwX Vendor Homepage : http://www.xnview.com Link Software : https://www.xnview.com/fr/xnview/downloads Tested on OS: Windows 7 ''' Proof of Concept PoC: ======================= 1.Download and install XnView 2.Open th...

CVE-2014-2387

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...

CVE-2014-2387

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...

Design/Logic Flaw

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...

CVE-2014-2387

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...

CVE-2014-2387

CVE-2014-2387 affects Pen 0.18.0, which has insecure temporary file creation. The vulnerability allows local attackers to exploit symlink attacks via temporary files such as "/tmp/webfile.html" and "/tmp/penctl.cgi", potentially corrupting system files. The provided documents state the issue but ...

CVE-2014-2387

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...

PT-2019-7086

Name of the Vulnerable Software and Affected Versions Pen version 0.18.0 Description The issue is related to Insecure Temporary File Creation. Recommendations For Pen version 0.18.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2014-2387: Exposure of Resource to Wrong Sphere

Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...

StartTileData.dll Code Execution

The vulnerability of the StartTileData.dll library in the Windows operating system is related to errors during the creation of files in protected directories. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created...

libming Heap Buffer Overflow DoS

The vulnerability of the decompileSETTARGET function in the libming library for creating Adobe Flash files is related to a data processing error when there is a mismatch in data sizes. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Product Key Explorer 4.2.0.0 - Key Denial of Service (PoC)

Product Key Explorer 4.2.0.0 - Key Denial of Service PoC Exploit Title: Product Key Explorer 4.2.0.0 - 'Key' Denial of Service POC Discovery by: SajjadBnd Date: 2019-12-10 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/productkeyexplorersetup.exe Teste...

Windows iphlpsvc DLL Privilege Escalation File Modification

The vulnerability of the iphlpsvc.dll library in the Windows operating system is related to errors during file creation. Exploiting this vulnerability can allow attackers to enhance their privileges and modify arbitrary files using a specially created application...

JDK: Unrestricted access to diagnostic operations

From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks...

Logic flaw vulnerability in Zendo project management system

Zendo is China's first open source project management software. It integrates product management , project management , quality management , document management , organization management and transaction management. Zendo project management system has a logic flaw vulnerability , an attacker can...

BSA-2019-888

Security Advisory ID : BSA-2019-888 Component : Eclipse OpenJ9 Revision : 1.0: Final From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks...

Nsauditor 3.1.8.0 - 'Name' Denial of Service (PoC)

Exploit Title: Nsauditor 3.1.8.0 - 'Name' Denial of Service PoC Discovery by: SajjadBnd Date: 2019-11-30 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/nsauditorsetup.exe Tested Version: 3.1.8.0 Vulnerability Type: Denial of Service DoS Local Tested on...

Microsoft DirectX SDK 2010 Denial Of Service

Exploit Title: Microsoft DirectX SDK 2010 - '.PIXrun' Denial Of Service PoC Exploit Author : ZwX Exploit Date: 2019-11-26 Vendor Homepage : https://www.microsoft.com/ Link Software : https://www.microsoft.com/en-us/download/details.aspx?id=681 Tested on OS: Windows 7 Proof of Concept PoC:...