Zortam Mp3 Media Studio 21.15 - Insecure File Permissions Privilege Escalation

Exploit Title: Zortam Mp3 Media Studio 21.15 Insecure File Permissions Privilege Escalation Date: 23/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.zortam.com/ Software Link: http://www.zortam.com/download.html...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the CFNetwork component in the Mac OS X operating system is related to the use of weak permissions for cookie files in web browsers. Exploiting this vulnerability could allow an intruder, operating locally, to obtain confidential information using indefinite vectors...

Debian DLA-623-1 : tomcat7 security update

Dawid Golunski from legalhackers.com discovered that Debian's version of Tomcat 7 was vulnerable to a local privilege escalation. Local attackers who have gained access to the server in the context of the tomcat7 user through a vulnerability in a web application were able to replace the file with...

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link:...

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link:...

CVE-2 0 1 6-6 6 6 2-MySQL ‘malloc_lib’variable rewrite command to perform the analysis-vulnerability warning-the black bar safety net

Today there is one about the MySQL vulnerability is revealed, numbered CVE-2 0 1 6-6 6 6 2 in. The vulnerability is mainly related to the mysqldsafe script in acceleration/handling memory when using “malloclib”variable as identify the marker selective loadingpreload, such as tcmalloc or the like ...

WinSMS 3.43 - Insecure File Permissions Privilege Escalation Exploit

Exploit for windows platform in category local exploits Exploit Title: WinSMS 3.43 Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: http://www.winsms.co.za Software Link:...

Icecream Apps - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream...

WinSMS 3.43 - Insecure File Permissions Privilege Escalation

Exploit Title: WinSMS 3.43 Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.winsms.co.za Software Link: https://www.winsms.co.za/products/bulk-sms-desktop-software/ Version:...

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation

Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link: https://eu.battle.net/account/download/ Version: Version 1.5.0.7963 Tested...

WIN-911 7.17.00 Insecure File Permissions / Plaintext Password Storage

Title: WIN-911 - Insecure File Permissions EoP CWE Class: CWE-276: Incorrect Default Permissions Date: 05/09/2016 Vendor: Win911 Product: WIN-911 Type: Alarm Notification Software Version: V7.17.00 Download URL: through Rockwell Automation downloads:...

WIN-911 7.17.00 - Multiple Vulnerabilities

Exploit for windows platform in category local exploits Title: WIN-911 - Insecure File Permissions EoP CWE Class: CWE-276: Incorrect Default Permissions Date: 05/09/2016 Vendor: Win911 Product: WIN-911 Type: Alarm Notification Software Version: V7.17.00 Download URL: through Rockwell Automation...

WIN-911 7.17.00 - Multiple Vulnerabilities

WIN-911 7.17.00 - Multiple Vulnerabilities Title: WIN-911 - Insecure File Permissions EoP CWE Class: CWE-276: Incorrect Default Permissions Date: 05/09/2016 Vendor: Win911 Product: WIN-911 Type: Alarm Notification Software Version: V7.17.00 Download URL: through Rockwell Automation downloads:...

WIN-911 7.17.00 - Multiple Vulnerabilities

Title: WIN-911 - Insecure File Permissions EoP CWE Class: CWE-276: Incorrect Default Permissions Date: 05/09/2016 Vendor: Win911 Product: WIN-911 Type: Alarm Notification Software Version: V7.17.00 Download URL: through Rockwell Automation downloads:...

BSNL Teracom Router Firmware Rewrite / Link Modification

Multiple Vulnerabilities in TERACOM ROUTER Author: Ajay Gowtham aka AJOXR Contact: gowtham.ajay5 at gmail.com Vulnerability Type: Insecure Upload File Permissions Affected Module: Upload Functionality Criticality: Medium Device Model: BSNL Teracom T2-B-Gawv1.4U10Y-BI is WiFi enabled ADSL2+...

Updated kernel-linus packages fix security vulnerabilities

This update is based on the upstream 4.4.16 kernel and fixes at least theese security issues: nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c. CVE-2016-1237. The...

ZKTeco ZKTime.Net 3.0.1.6 - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.0.1.6 3.0.1.5 160622 3.0.1.1 160216 Summary:...

ZKTeco ZKAccess Professional 3.5.3 Insecure File Permissions

i? ZKTeco ZKAccess Professional 3.5.3 Insecure File Permissions Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.5.3 Build 0005 Summary: ZKAccess 3.5 is a desktop software which is suitable for small and...

ZKTeco ZKAccess Professional 3.5.3 - Insecure File Permissions Privilege Escalation

ZKTeco ZKAccess Professional 3.5.3 - Insecure File Permissions Privilege Escalation ZKTeco ZKAccess Professional 3.5.3 Insecure File Permissions Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.5.3 Build 00...

ZKTeco ZKAccess Professional 3.5.3 - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits ZKTeco ZKAccess Professional 3.5.3 Insecure File Permissions Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.5.3 Build 0005 Summary: ZKAccess 3.5 is ...