41 matches found
Windows DNS Server Heap Overflow Vulnerability
A remote code execution vulnerability exists in Windows Domain Name System DNS servers when they fail to properly handle requests. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account. Windows servers that are configured as D...
The vulnerability of the DNSAPI component for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the DNSAPI component DNSAPI.dll in Windows operating systems is related to insufficient access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the Local System Account by sending specially crafted DNS responses from ...
Windows DNSAPI Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account. To exploit the vulnerability, the...
WatchGuard AP100, AP102 and AP200 Authentication Vulnerabilities
The WatchGuard AP100, AP102 and AP200 are all different series of indoor wireless access point devices from WatchGuard USA. A security vulnerability exists in the WatchGuard AP100, AP102, and AP200 using firmware versions prior to 1.2.9.15, which stems from a failure of the local Access Point Web...
CVE-2018-10576
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the native Access Point web UI allows authentication using a local system account instead of the dedicated web-only user...
CVE-2018-10576: Improper Authentication
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the native Access Point web UI allows authentication using a local system account instead of the dedicated web-only user...
Microsoft Malware Protection Engine Remote Code Execution (CVE-2018-0986)
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption .An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the Local Syst...
Security Advisory - Remote Code Execution Vulnerability in Windows DNSAPI
Microsoft released a security advisory to disclose a remote code execution vulnerability in Windows Domain Name System DNS DNSAPI.dll. An unauthenticated, remote attacker would use a malicious DNS server to send corrupted DNS responses to the target. The attacker could exploit the vulnerability t...
Windows DNSAPI Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account. To exploit the vulnerability, the...
Linux kernel 2.6.22 < 3.9 elevation of privilege vulnerability (Dirty COW)
Summary A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only memory mappings. All the information we have so far is included in this page. The bug has existed since around 2.6.22 released in 2007 and was fixed on Oct...
Microsoft Windows DNS Server Memory Misreference Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. A memory misreference vulnerability exists in the Microsoft Windows DNS server, which arises from a failure of the program to properly process a request. An attacker is allowed to exploit the...
Microsoft Windows CVE-2016-3227 DNS Use After Free Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits can allow attackers to execute arbitrary code within the context of the Local System Account. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft...
Microsoft Windows DNS Memory Misreference Vulnerability
Microsoft Windows Server is a series of server operating systems released by Microsoft.DNS is one of the domain name resolution server components. A memory misreference vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1, Server 2012 Gold and R2 Domain Name System DNS servers. As...
Microsoft Windows Task Scheduler Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary code with the Local system account. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Microsoft...
Oracle for Windows privilege escalation
Weak permissions for memories sections and named pipes inside oracle process allow code execution with local system account...
ISS BlackICE / ISS RealSecure intrusion prevention systems privilege escalation
Help subsystem is launched under Local System account...
Microsoft Windows - Improper Token Validation Privilege Escalation
Microsoft Windows - Improper Token Validation Privilege Escalation / Removed include "stdafx.h" / str0ke / include include define INFOBUFFERSIZE MAXCOMPUTERNAMELENGTH + 1 define PATHSIZE INFOBUFFERSIZE + MAXPATH + 4 typedef UINT WINAPI PFnMsiInstallProductLPCSTR szPackagePath, LPCSTR szCommandLin...
MS Windows Improper Token Validation Local Exploit (working)
Exploit for unknown platform in category local exploits ============================================================ MS Windows Improper Token Validation Local Exploit working ============================================================ / Removed include "stdafx.h" / str0ke / include include defi...
Microsoft Windows - Improper Token Validation Privilege Escalation
/ Removed include "stdafx.h" / str0ke / include include define INFOBUFFERSIZE MAXCOMPUTERNAMELENGTH + 1 define PATHSIZE INFOBUFFERSIZE + MAXPATH + 4 typedef UINT WINAPI PFnMsiInstallProductLPCSTR szPackagePath, LPCSTR szCommandLine; int mainint argc, char argv HANDLE hToken,hThread; HMODULE hMsi ...
CVE-2003-0998: Undefined Security Weakness
Unknown "potential system security vulnerability" in Computer Associates CA Unicenter Remote Control 5.0 through 5.2, and ControlIT 5.0 and 5.1, may allow attackers to gain privileges to the local system account...