CVE-2016-5249: Undefined Security Weakness

Lenovo Solution Center LSC before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly...

Matrix42 Remote Control Host 3.20.0031 - Unquoted Path Privilege Escalation

Exploit Title: Matrix42 Remote Control Host - Unquoted Path Privilege Escalation Date: 06-05-2016 Exploit Author: Roland C. Redl Vendor Homepage: https://www.matrix42.com/ Software Link: n/a Version: 3.20.0031 Tested on: Windows 7 Enterprise SP1 x64 CVE : n/a 1. Description: sc qc...

Certec EDV atvise SCADA Server 2.5.9 - Local Privilege Escalation

Certec EDV atvise SCADA server 2.5.9 Privilege Escalation Vulnerability Vendor: Certec EDV GmbH Product web page: http://www.atvise.com Affected version: 2.5.9 Summary: atvise scada is based on newest technologies and standards: The visualization in pure web technology as well as a consistent...

Microsoft IExpress DLL Hijacking

Hi @ll, IExpress creates executable installers ° or self-extracting archives for Windows by embedding a .CAB archive and some strings as resources into a copy of the program %SystemRoot%\System32\WExtract.exe. These self-extracting archives/executable installers, especially those made by Microsof...

Windows 8.1 - DCOM DCE/RPC Local NTLM Reflection Privilege Escalation (MS15-076) Exploit

Exploit for windows platform in category local exploits Source: https://github.com/monoxgas/Trebuchet Trebuchet MS15-076 CVE-2015-2370 Privilege Escalation Copies a file to any privileged location on disk Compiled with VS2015, precompiled exe in Binary directory Usage: trebuchet.exe...

Electronic Arts Origin Client 9.5.5 Multiple Privilege Escalation Vulnerabilities

The application is vulnerable to an elevation of privileges vulnerability which can be used by a simple user that can change the executable file with a binary of choice. The vulnerability exist due to the improper permissions, with the 'F' flag full for the 'Everyone' and 'Users' group, for the...

Microsoft IIS WebDAV Remote Buffer Overflow (MS03-007) - Ver2 (CVE-2003-0109)

The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. Several Microsoft Windows IIS servers support the World Wide Web Distributed Authoring and Versioning WebDAV...

Design/Logic Flaw

CCH Wolters Kluwer ProSystem fx Engagement aka PFX Engagement 7.1 and earlier uses weak permissions Authenticated Users: Modify and Write for the 1 Pfx.Engagement.WcfServices, 2 PFXEngDesktopService, 3 PFXSYNPFTService, and 4 P2EWinService service files in PFX Engagement, which allows local users...

CVE-2014-9113

CCH Wolters Kluwer ProSystem fx Engagement aka PFX Engagement 7.1 and earlier uses weak permissions Authenticated Users: Modify and Write for the 1 Pfx.Engagement.WcfServices, 2 PFXEngDesktopService, 3 PFXSYNPFTService, and 4 P2EWinService service files in PFX Engagement, which allows local users...

CVE-2014-9113: Undefined Security Weakness

CCH Wolters Kluwer ProSystem fx Engagement aka PFX Engagement 7.1 and earlier uses weak permissions Authenticated Users: Modify and Write for the 1 Pfx.Engagement.WcfServices, 2 PFXEngDesktopService, 3 PFXSYNPFTService, and 4 P2EWinService service files in PFX Engagement, which allows local users...

MS15-001 Microsoft Windows NtApphelpCacheControl Improper Authorization Check

On Windows, the system call NtApphelpCacheControl the code is actually in ahcache.sys allows application compatibility data to be cached for quick reuse when new processes are created. A normal user can query the cache but cannot add new cached entries as the operation is restricted to...

Microsoft Windows 2000 Still Image Service Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1651/info The Still Image Service in windows 2000 is vulnerable to an unchecked buffer which could enable a user to run commands at the privilege level of the service LocalSystem by default. This is due to an unchecked...

Microsoft Windows XP/VISTA/2003/2008 - WMI Service Isolation Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34442/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected...

Microsoft Windows XP/2003 - RPCSS Service Isolation Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34443/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected...

ISS PAM.dll ICQ Parser Buffer Overflow

No description provided by source. $Id: blackicepamicq.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Huawei Technologies eSpace Meeting Service 1.0.0.23 - Local Privilege Escalation

No description provided by source. ? Huawei Technologies eSpace Meeting Service 1.0.0.23 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product web page: http://www.huawei.com Affected version: 1.0.0.23 V100R001C03SPC201B050 Summary: Huawei's eSpace Meeting solution fully meets...

MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...

Microsoft Windows VISTA/2008 - Thread Pool ACL Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34444/info Microsoft Windows is prone to a privilege-escalation vulnerability. Successful exploits may allow attackers to elevate their privileges to LocalSystem, which would facilitate the complete compromise of affected...

Sysax FTP Automation Server 5.33 Local Privilege Escalation

No description provided by source. Title: Sysax FTP Automation Server Local Privilege Escalation Author: Craig Freyman @cd1zz OS Tested: XP SP3 32bit Version Tested: 5.33 Date Discovered: October 1, 2012 Vendor Contacted: October 21, 2012 Vendor Response: November 1, 2012 Demo:...

BakBone NetVault 7.1 - Local Privilege Escalation Exploit

No description provided by source. // ===== Start UnhideNetVaultServiceWindow.c ====== include stdio.h include windows.h int main void HWND hWnd; char szWindowName = C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe; printf Finding window %s\n, szWindowName ; hWnd = FindWindow...