Symantec VIP Access Arbitrary DLL Execution

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SYMANTEC-VIP-ACCESS-ARBITRARY-DLL-EXECUTION.txt + ISR: ApparitionSec Vendor: ================ www.symantec.com Product: =================== Symantec VIP Access Desktop...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

Reason Core Security 1.1.2 Privilege Escalation

===================================================== Exploit Title : Reason Core Security - Unquoted Service Path Privilege Escalation Affected Products: Reason Core Security v1.1.2 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 10...

WonderShare Filmora 7.5.0 DLL Hijacking

===================================================== Exploit Title : WonderShare Filmora 7.5.0 - DLL Hijacking Vulnerability Date Discovered : 2016-10-15 Affected Products: Product: WonderShare Filmora v7.5.0 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 7...

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/HP-TOUCHSMART-CALENDAR-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard...

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation

HP TouchSmart Calendar 4.1.4245 - Insecure File Permissions Privilege Escalation + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/HP-TOUCHSMART-CALENDAR-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ==========...

Hewlett Packard TouchSmart Calendar Service 4.1.4245 Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/HP-TOUCHSMART-CALENDAR-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ========== www.hp.com Product: =========================================== Hewlett Packard...

iWisoft Video Converter 1.2 DLL Hijacking

i?Document Title: =============== iWisoft Video Converter 1.2 - DLL Hijacking Vulnerability Release Date: ============= 2016-10-04 Vulnerability Disclosure Timeline: ================================== 2016-10-04 : Discovery of the Vulnerability 2016-10-04 : Contact the Vendor No Response 2016-10-...

MP3 Cutter 1.1.0 - Reverse Engineering Issue

Document Title: =============== MP3 Cutter 1.1.0 - Reverse Engineering Issue References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1937 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 1937 Common...

Picosmos Shows v1.6.0 - Stack Overflow Vulnerability

Document Title: =============== Picosmos Shows v1.6.0 - Stack Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1936 Release Date: ============= 2016-09-05 Vulnerability Laboratory ID VL-ID: ==================================== 1936...

PHP 5.0.0 'snmpwalkoid()' Local Denial of Service Vulnerability

PHP is a new language for writing CGI programs. A local denial of service vulnerability exists in PHP 5.0.0 'snmpwalkoid', which can be exploited by attackers to launch denial of service attacks...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The xviewg-dev package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-headers-2.4.18-1-386 operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals locally...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Windows operating system’s kernel mode drivers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application...

Blat 3.2.14 - Stack Overflow

Blat 3.2.14 - Stack Overflow 1. Vulnerable Product Version: Blat v3.2.14 Link: blat.net 2. Vulnerability Information Impact: Attacker may gain administrative access / can perform a DOS Remotely Exploitable: No Locally Exploitable: May be possible 3. Product Details An open source Windows 32 & 64...

FreeBSD atkbd Module Buffer Overflow Vulnerability

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project run by the Core Team team, and is an important branch of Unix-like development through BSD, 386BSD and 4.4BSD. atkbd is one of the driver modules provided for accessing to an AT84 keyboard or connecting to an AT Enhanced...

Microsoft Internet Explorer DLL Loading Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE version 11, which originates from a program that fails to properly...

KLA10779 Privilege escalation vulnerability at Cogent DataHub

An unspecified vulnerability was found in Cogent DataHub. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via files manipulations. Original advisories ICS-CERT advisory Exploitation Public exploits exist for this vulnerability...

Apple iOS v9.x - Application Update Loop Pass Code Bypass

Document Title: =============== Apple iOS v9.x - Application Update Loop Pass Code Bypass References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1711 View Video: https://www.youtube.com/watch?v=V-9lE1L3nq0 Apple Follow-up ID: 631627909 Advisory:...