CVE-2020-8918

An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an eavesdropping attacker to discover the auth value for a key created with CreateWrapKey. An attacker listening in on the channel can collect both 'encUsageAuth' and...

CVE-2020-7009

Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is able to generate an API key can perform a series of steps that result in an API key being generated with elevated privileges...

Microsoft Exchange Validation Key Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Exchange Server when the server fails to properly create unique keys at install time. Knowledge of a the validation key allows an authenticated user with a mailbox to pass arbitrary objects to be deserialized by the web application, which...

OpenSSH < 4.5 Multiple Vulnerabilities

Binary data 701165.prm...

Medis Cross-Site Scripting Vulnerability

Medis is a web-based Redis database management application for the Mac platform. A cross-site scripting vulnerability exists in the key parameter of the new key creation page in Medis 0.6.1 and prior versions. A remote attacker can exploit this vulnerability to execute code...

DEBIAN-CVE-2018-1098

A cross-site request forgery flaw was found in etcd 3.3.1 and earlier. An attacker can set up a website that tries to send a POST request to the etcd server and modify a key. Adding a key is done with PUT so it is theoretically safe can't PUT from an HTML form or such but POST allows creating...

Cisco node-jos < 0.11.0 - Re-sign Tokens Exploit

Exploit for multiple platform in category web applications import base64 import urllib import rsa import sys zi0Black ''' POC of CVE-2018-0114 Cisco node-jose 0.11.0 Created by Andrea Cappa aka @zi0Black GitHub,Twitter,Telegram Mail: email protected Site: https://zioblack.xyz A special thanks to...

Internet Explorer Elevated Privilege Execution

Internet Explorer browser contains a vulnerability related to the checking of local files during installation, as well as to the secure creation of registry keys. Exploiting this vulnerability allows an increase in privilege levels...

CVE-2014-0268

Microsoft Internet Explorer 8 through 11 does not properly restrict file installation and registry-key creation, which allows remote attackers to bypass the Mandatory Integrity Control protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2014-0268

Microsoft Internet Explorer 8 through 11 does not properly restrict file installation and registry-key creation, which allows remote attackers to bypass the Mandatory Integrity Control protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2014-0268: Undefined Security Weakness

Microsoft Internet Explorer 8 through 11 does not properly restrict file installation and registry-key creation, which allows remote attackers to bypass the Mandatory Integrity Control protection mechanism via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

PT-2014-1123

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 8 through 11 Description The issue is related to the improper restriction of file installation and registry-key creation, allowing remote attackers to bypass the Mandatory Integrity Control protection...

CVE-2001-0903

Linear key exchange process in High-bandwidth Digital Content Protection HDCP System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication...