Microsoft Windows Kerberos Local Security Bypass Vulnerability (3105256)

This host is missing an important security update according to Microsoft Bulletin MS15-122. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows NtUserDisableProcessWindowFiltering Information Disclosure Vulnerability

This vulnerability allows local attackers to leak sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

AlienVault Unified Security Management Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges to root on vulnerable installations of AlienVault Unified Security Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the server and database. A local...

Oracle VirtualBox Unspecified Vulnerability (Nov 2015) - Linux

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Kaspersky Total Security Multi-Device MD5 Local Information Disclosure Vulnerability

Kaspersky Total Security Multi-Device is a multi-device security suite. A local information disclosure vulnerability exists in Kaspersky Total Security Multi-Device, which can be exploited by local attackers to obtain sensitive information for brute force attacks...

Kaspersky Internet Security MD5 Local Information Disclosure Vulnerability

Kaspersky Internet Security is a suite of security software that combines antivirus and firewall features. Kaspersky Internet Security has a local information disclosure vulnerability that can be exploited by local attackers to obtain sensitive information for brute force attacks...

GNU glibc 'LD_POINTER_GUARD' Elevation of Privilege Vulnerability

GNU glibc is an open source, free C compiler released under the LGPL license. A security vulnerability exists in GNU glibc 'LDPOINTERGUARD' which allows local attackers to exploit the vulnerability to elevate privileges...

Apple iOS Information Disclosure Vulnerability

iOS is an operating system developed by Apple for mobile devices. Apple iOS versions prior to 9.1 mishandled Notification Center by changing the lock screen display settings, allowing local attackers to obtain sensitive information by searching for phone calls or message notifications after the...

Adobe Reader Arbitrary File Deletion Sandbox Escape Vulnerability

This vulnerability allows local attackers to delete arbitrary files on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

The vulnerability of the NX-OS network operating system allows a hacker to execute arbitrary operating system commands.

The vulnerability of the NX-OS network operating system is related to deficiencies in access control for files. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary commands on the operating system by sending specific parameters...

Cisco AnyConnect elevation of privileges via DLL side loading

------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges via DLL side loading ------------------------------------------------------------------------ Yorick Koster, June 2015...

(Pwn2Own) Microsoft Windows secdrv.sys Uninitialized Buffer Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the secdrv.sys...

LanWhoIs.exe 1.0.1.120 - Stack Buffer Overflow (PoC)

LanWhoIs.exe 1.0.1.120 - Stack Buffer Overflow PoC ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-LANWHOIS-BUFFER-OVERFLOW-10062015.txt Vendor: ================================ www.lantricks.com Product:...

FreeYouTubeToMP3 Converter 4.0.1 - Buffer Overflow

Document Title: =============== FreeYouTubeToMP3 Converter 4.0.1 - Buffer Overflow References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1613 Release Date: ============= 2015-10-05 Vulnerability Laboratory ID VL-ID: ==================================== 1613...

Apple OS X kernel memory corruption vulnerability (CNVD-2015-06429)

Apple OS X is an operating system developed by Apple Inc. A memory corruption vulnerability exists in the Apple OS X kernel, which can be exploited by a local attacker to execute arbitrary code in the kernel context...

Apple OS X Time Machine Architecture Backup Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X has a problem with backups through the time machine architecture, allowing local attackers to exploit vulnerabilities to obtain keychain item information...

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the Multipeer Connectivity component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a local attacker to gain access to protected information by launching attacks on the encryption system...

IBM Maximo Asset Management Information Disclosure Vulnerability (CNVD-2015-06394)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. An information disclosure vulnerability exists in IBM Maximo Asset Management. A local attacker could exploit the vulnerability to obtain sensitive information...

GNU Libgcrypt Information Disclosure Vulnerability

GNU Libgcrypt is a general-purpose encryption library based on the GnuPG code. An information disclosure vulnerability exists in GNU Libgcrypt, which allows local attackers to exploit the vulnerability to obtain sensitive information or impersonate a trusted server...

Linux Kernel Local Security Bypass Vulnerability (CNVD-2015-06390)

Linux kernel is an open source operating system. Linux kernel has a security vulnerability that allows local attackers to bypass security restrictions and perform unauthorized operations...