Microsoft Windows POP/MOV SS Local Privilege Elevation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe'...

Google Updater for MacOS Local Elevation of Privilege Vulnerability

Google Updater for MacOS is an update program for Google products based on the MacOS platform developed by Google USA. A local elevation of privilege vulnerability exists in Google Updater for MacOS, which stems from the program's unsafe use of Distributed Objects, and can be exploited by a local...

Johnathan Nightingale beep local elevation of privilege vulnerability

Johnathan Nightingale beep is an application for making sounds such as alarms. A local elevation of privilege vulnerability exists in Johnathan Nightingale beep version 1.3.4 and earlier. A local attacker can exploit this vulnerability to elevate privileges...

CVE-2017-13273

In xtqtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-65853158...

Double free

In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is...

Jungo Windriver Local Elevation of Privilege Vulnerability

Jungo WinDriver is a PCI/USB device driver development tool from Jungo Connectivity, Israel. A local elevation of privilege vulnerability exists in Jungo Windriver version 12.5.1. A local attacker can exploit this vulnerability to cause a denial of service buffer overflow or gain system privilege...

Ubiquiti UniFi Video Local Elevation of Privilege Vulnerability

Ubiquiti UniFi Video is a webcam product from Ubiquiti Networks, USA. A local elevation of privilege vulnerability exists in Ubiquiti UniFi Video. A local attacker can exploit this vulnerability to execute arbitrary code with elevated privileges...

Zerodium Offers $500K for Secure Messaging App Zero Days

Zerodium, a vendor operating in the nebulous exploit acquisition market, has put a premium on zero-day vulnerabilities in secure messaging applications in a new pricing structure announced today. Remote code execution and local privilege elevation zero days in messaging apps such as WhatsApp,...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07278)

NVIDIA GPU Display Driver is a set of graphics processor GPU graphics card drivers from NVIDIA. A security vulnerability exists in the GPU firmware in NVIDIA GPU Display Driver due to the program failing to properly enforce access control. An attacker could exploit the vulnerability to elevate...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07445)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in the kernel mode layer nvlddmkm.sys handler in the NVIDIA Windows GPU Display Driver. An attacker could use this vulnerability ...

Objective Development Little Snitch Local Privilege Vulnerability

Objective Development Little Snitch is a suite of personal security software for Mac from the Austrian company Objective Development. A local elevation of privilege vulnerability exists in Objective Development Little Snitch versions 3.0 through 3.7.3. An attacker can exploit this vulnerability t...

Local Elevation of Privilege Vulnerability in Multiple Cisco Products

Cisco Unified Computing System UCS Manager provides unified, embedded management of all software and hardware components in Cisco UCS. Cisco Firepower 4100 Series Next-Generation Firewall NGFW is the industry's first fully integrated, threat-oriented, next-generation firewall with unified...

Adups Local Elevation of Privilege Vulnerability

Adups Fota is a professional wireless upgrade solution for IoT devices smart car, wearable, home, VR, etc. from Shanghai Guangsheng Information Technology Co. Adups suffers from a local elevation of privilege vulnerability. The vulnerability is caused by setting the android: sharedUserId attribut...

CVE-2017-0307

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

UBUNTU-CVE-2016-8417

An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current...

CVE-2016-9345

An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system...

Cisco AnyConnect Secure Mobility Client Local Elevation of Privilege Vulnerability

Cisco AnyConnect Secure Mobility Client is a secure mobility client from Cisco that provides secure access to networks and applications from any device. A local elevation of privilege vulnerability exists in Cisco AnyConnect Secure Mobility Client. A local attacker could use this vulnerability to...

Palo Alto Networks PAN-OS Local Elevation of Privilege Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A local elevation of privilege vulnerability exists in Palo Alto Networks PAN-OS. A local attacker can exploit this vulnerability to gain privileges with specially crafted environme...

Pacemaker Local Elevation of Privilege Vulnerability

Pacemaker is a cluster resource manager that provides fault detection, cluster services, etc. via a preferred cluster infrastructure OpenAIS or Heartbeat. A local elevation of privilege vulnerability exists in Pacemaker versions 1.1.10 through 1.1.15, which can be exploited by an attacker to gain...

CVE-2016-7216

The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandles permissions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Elevation of Privilege Vulnerability."...