UBUNTU-CVE-2016-3100

kinit in KDE Frameworks before 5.23.0 uses weak permissions 644 for /tmp/xauth-xxx-y, which allows local users to obtain X11 cookies of other users and consequently capture keystrokes and possibly gain privileges by reading the file...

The vulnerability of Samba software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in Samba when operating as an Active Directory domain controller due to the fact that all users have permission to write to non-standard CIFS network resources. Exploiting this vulnerability allows remote users who have been authenticated to view, modify, create, and dele...

SQLite Information Disclosure Vulnerability

SQLite is an open source C-based embedded relational database management system developed by American software developer D. Richard Hipp. The system is characterized by independence, isolation, cross-platform and so on. SQLite 3.13.0 before the version of a security vulnerability , the...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

UBUNTU-CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

Alertus Desktop Notification for OS X Design Vulnerability

Alertus Desktop Notification for OS X is a suite of desktop notification software from Alertus Inc. for OS X, a specialized operating system developed for Mac computers. A security vulnerability exists in Alertus Desktop Notification for OS X prior to version 2.9.30.1710, which arises from the...

Vulnerabilities in VeriFace and VeriFace Pro software - Lenovo Support US

No description provided...

ACROS Security 0patch 2016.05.19.539 - '0PatchServicex64.exe' Unquoted Service Path Privilege Escalation

ACROS Security 0patch 0PatchServicex64.exe Unquoted Service Path Privilege Escalation Vendor: ACROS, d.o.o. Product web page: https://www.0patch.com Affected version: 2016.05.19.539 Summary: 0patch pronounced 'zero patch' is a platform for instantly distributing, applying and removing microscopic...

Riot Games League Of Legends Insecure File Permissions Privilege Escalation

------------------------------------------------------------------------------------ Exploit Title: Riot Games League of Legends Insecure File Permissions Privilege Escalation Date: 03/06/16 Exploit Author: Cyril Vallicari i give credit also to Vincent Yiu he probably found this too Vendor...

Riot Games League of Legends - Insecure File Permissions Privilege Escalation

Riot Games League of Legends - Insecure File Permissions Privilege Escalation ------------------------------------------------------------------------------------ Exploit Title: Riot Games League of Legends Insecure File Permissions Privilege Escalation Date: 03/06/16 Exploit Author: Cyril...

Riot Games League of Legends - Insecure File Permissions Privilege Escalation

------------------------------------------------------------------------------------ Exploit Title: Riot Games League of Legends Insecure File Permissions Privilege Escalation Date: 03/06/16 Exploit Author: Cyril Vallicari i give credit also to Vincent Yiu he probably found this too Vendor...

Riot Games League of Legends - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits ------------------------------------------------------------------------------------ Exploit Title: Riot Games League of Legends Insecure File Permissions Privilege Escalation Date: 03/06/16 Exploit Author: Cyril Vallicari i give credit also...

League of Legends Screensaver - Insecure File Permissions Privilege Escalation

League of Legends Screensaver - Insecure File Permissions Privilege Escalation Exploit Title: League of Legends Screensaver Insecure File Permissions Privilege Escalation CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage:...

League of Legends Screensaver - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: League of Legends Screensaver Insecure File Permissions Privilege Escalation CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: email protected Vendor Homepage: http://www.leagueoflegends.com Software Link:...

League Of Legends Screensaver File Permission Privilege Escalation

Exploit Title: League of Legends Screensaver Insecure File Permissions Privilege Escalation CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage: http://www.leagueoflegends.com Software Link: screensaver.euw.leagueoflegends.com/enUS Version: MD5...

League of Legends Screensaver - Insecure File Permissions Privilege Escalation

Exploit Title: League of Legends Screensaver Insecure File Permissions Privilege Escalation CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage: http://www.leagueoflegends.com Software Link: screensaver.euw.leagueoflegends.com/enUS Version: MD5...

Power Hit Radio Eesti - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Power Hit Radio Eesti published at the 'play' market has multiple vulnerabilities...

Valve Steam 3.42.16.13 - Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Valve Steam 3.42.16.13 Local Privilege Escalation CVE-ID: CVE-2016-5237 Date: 5/11/52016 Exploit Author: gsX Contact: email protected Vendor Homepage: http://www.valvesoftware.com/ Software Link:...

Valve Steam 3.42.16.13 Local Privilege Escalation

Exploit Title: Valve Steam 3.42.16.13 Local Privilege Escalation CVE-ID: CVE-2016-5237 Date: 5/11/52016 Exploit Author: gsX Contact: [email protected] Vendor Homepage: http://www.valvesoftware.com/ Software Link: http://store.steampowered.com/about/ Version: File Version 3.42.16.13, Built: Apr ...

Valve Steam 3.42.16.13 - Local Privilege Escalation

Valve Steam 3.42.16.13 - Local Privilege Escalation Exploit Title: Valve Steam 3.42.16.13 Local Privilege Escalation CVE-ID: CVE-2016-5237 Date: 5/11/52016 Exploit Author: gsX Contact: [email protected] Vendor Homepage: http://www.valvesoftware.com/ Software Link:...