Microsoft Windows - VHDMP ZwDeleteFile Arbitrary File Deletion Privilege Escalation (MS16-138) Explo

Exploit for windows platform in category local exploits / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=915 Windows: VHDMP ZwDeleteFile Arbitrary File Deletion EoP Platform: Windows 10 10586 and 14393. No idea about 7 or 8.1 versions. Class: Elevation of Privilege Summary: The...

Mozilla Firefox ESR Security Advisories (MFSA2016-89, MFSA2016-90) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Microsoft Windows - VHDMP ZwDeleteFile Arbitrary File Deletion Privilege Escalation (MS16-138)

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=915 Windows: VHDMP ZwDeleteFile Arbitrary File Deletion EoP Platform: Windows 10 10586 and 14393. No idea about 7 or 8.1 versions. Class: Elevation of Privilege Summary: The VHDMP driver doesn’t safely delete files leading to...

Microsoft Windows - VHDMP ZwDeleteFile Arbitrary File Deletion Privilege Escalation (MS16-138)

Microsoft Windows - VHDMP ZwDeleteFile Arbitrary File Deletion Privilege Escalation MS16-138 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=915 Windows: VHDMP ZwDeleteFile Arbitrary File Deletion EoP Platform: Windows 10 10586 and 14393. No idea about 7 or 8.1 versions. Class...

WordPress XCloner Plugin <= 3.1.4 - Cross-Site Request Forgery (CSRF)/File Deletion Vulnerability

WordPress XCloner Plugin is vulnerable to Cross-Site Request Forgery CSRF/File Deletion Vulnerability. There's no nonce check for file deletion, but it you need to be logged in as Administrator to do it. Solution Update the plugin...

WordPress XCloner 3.1.5 Denial Of Service / Code Execution

Exploit Title: XCloner = 3.1.5 Multiple Vulnerabilities Google Dork: inurl:"plugins/xcloner-backup-and-restore/readme.txt" -site:wordpress.org Date: 08/11/2016 Exploit Author: Felipe Molina @felmoltor Vendor Homepage: www.xcloner.com Software Link:...

WordPress Post Grid Plugin <= 2.0.12 - Arbitrary File Deletion

This plugin is prone to an arbitrary file deletion vulnerability. Solution Update the plugin...

WordPress Post Grid Plugin <= 2.0.11 - File Deletion Vulnerability

WordPress Post Grid plugin File deletion vulnerability allows any user to delete any file from the website. The vulnerbility is in postgridajaxremoveexportcontentlayout function. Solution Update the plugin...

Post Grid <= 2.0.12 - Unauthenticated Arbitrary File Deletion

The Post Grid WordPress plugin was affected by an Unauthenticated Arbitrary File Deletion security vulnerability...

Arbitrary File Deletion Vulnerability in dir Parameter of Mixcall Seat Management System

Mixcall seat management system is based on B/S architecture, the management personnel can directly log into the Mixcall seat management center through the computer, and view the detailed situation related to the seat personnel's voice services. An arbitrary file deletion vulnerability exists in t...

Alienvault OSSIM and USM PHP Object Injection Vulnerabilities

AlienVault OSSIM is an open source security information management system.USM is a security management platform that provides security monitoring, security event management and reporting, and a threat awareness system. An object injection vulnerability exists in Alienvault OSSIM and USM, which...

ZZCMS 7.1 Multiple Arbitrary File Deletion Vulnerabilities

Z Station Chief Merchants Content Management System ZZCMS developed by the ZZCMS team, incorporating database optimization, content caching, AJAX and other technologies,, open source, independent functional modules, to facilitate secondary development. ZZCMS 7.1 version of the existence of multip...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08862)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. An attacker could use this vulnerability to delete files or modif...

HP Performance Center 11.52.x / 12.x < 12.53 Multiple Vulnerabilities

The version of HP Performance Center installed on the remote Windows host is 11.52.x or 12.x prior to 12.53. It is, therefore, affected by multiple vulnerabilities : - An overflow condition exists in mchan.dll due to a failure to validate the size of a user-supplied string prior to copying it to ...

mallbuilder foreground arbitrary file deletion vulnerability

MallBuilder is a multi-user online shopping mall solution based on PHP + MYSQL. An arbitrary file deletion vulnerability exists in the frontend of mallbuilder. Due to lib/smarty/movepic.php in the $GET'pname' external incoming parameters are not filtered, as a controllable parameter, when type =...

WordPress Real3D FlipBook plugin has multiple vulnerabilities

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports setting up personal blog sites on PHP and MySQL servers.Real3D FlipBook is one of the 3D eBooks and magazines plugin. Real3D FlipBook suffers from a file deletion vulnerability...

CVE-2016-7162

The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...

Arbitrary File Deletion Vulnerability in 'hid_name' in OfficeTen Management System of NetEconomic Technology (Suzhou) Co.

OfficeTen is an enterprise next-generation converged communication product that integrates voice, data, security, and real-time communication applications, developed by Nethru Technology with independent innovation and its own intellectual property rights. Arbitrary file deletion vulnerability...

Arbitrary File Deletion Vulnerability in the 'hid_fname' Parameter of the OfficeTen Management System at Netstar Technology (Suzhou) Co.

OfficeTen Management System is an integrated information system that provides personalized services to customers. An arbitrary file deletion vulnerability exists in the 'hidfname' parameter of the OfficeTen Management System of NetEnt Technology Suzhou Co. Submit POST:...

WordPress Plugin Image Export Local File Leakage Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A local file disclosure vulnerability exists in the WordPress plugin Image Export 'download/php'. An attacker...