Design/Logic Flaw

In the Activity Manager service, there is a possible permission bypass due to incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android I...

CVE-2019-9438

The CVE-2019-9438 entry affects Android 10 Package Manager service. It enables information disclosure to other users via a confused deputy, allowing local disclosure of information about installed packages without extra execution privileges and without user interaction. The documented impact is a...

CVE-2019-9378

CVE-2019-9378 affects Android 10 in the Framework/Activity Manager area, where a permission check weakness allows local elevation of privileges without user interaction. The issue enables a bypass of access controls to gain higher privileges on the device, with Local attack vector and no authenti...

CVE-2019-9323

CVE-2019-9323 affects the Android Wallpaper Manager service. The issue is an information disclosure caused by a missing permission check, allowing any application to access the wallpaper image without extra privileges, with no user interaction required. The Android 10 release notes indicate this ...

CVE-2019-2121

In ActivityManagerService.attachApplication of ActivityManagerService, there is a possible race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Andro...

Design/Logic Flaw

In resetPasswordInternal of DevicePolicyManagerService.java, there is a possible bypass of password reset protection due to an unusual root cause. Remote user interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9Android ID: A-110172241...

June 11, 2019—KB4503293 (OS Build 18362.175)

None None...

Quest NetVault Backup Server < 11.4.5 - Process Manager Service SQL Injection / Remote Code Execution

Exploit Title: Quest NetVault Backup Server 11.4.5 Process Manager Service SQL Injection Remote Code Execution Vulnerability ZDI-17-982 Date: 2-21-2019 Exploit Author: credit goes to rgod for finding the bug Version: Quest NetVault Backup Server 11.4.5 CVE : CVE-2017-17417 There is a decent...

Quest NetVault Backup Server < 11.4.5 - SQL Injection / Remote Code Execution Vulnerability

Exploit for multiple platform in category web applications Exploit Title: Quest NetVault Backup Server 11.4.5 Process Manager Service SQL Injection Remote Code Execution Vulnerability ZDI-17-982 Exploit Author: credit goes to rgod for finding the bug Version: Quest NetVault Backup Server 11.4.5 C...

CVE-2019-5909

License Manager Service of YOKOGAWA products CENTUM VP R5.01.00 - R6.06.00, CENTUM VP Entry Class R5.01.00 - R6.06.00, ProSafe-RS R3.01.00 - R4.04.00, PRM R4.01.00 - R4.02.00, B/M9000 VPR7.01.01 - R8.02.03 allows remote attackers to bypass access restriction to send malicious files to the PC wher...

Design/Logic Flaw

License Manager Service of YOKOGAWA products CENTUM VP R5.01.00 - R6.06.00, CENTUM VP Entry Class R5.01.00 - R6.06.00, ProSafe-RS R3.01.00 - R4.04.00, PRM R4.01.00 - R4.02.00, B/M9000 VPR7.01.01 - R8.02.03 allows remote attackers to bypass access restriction to send malicious files to the PC wher...

CVE-2019-5909

License Manager Service of YOKOGAWA products CENTUM VP R5.01.00 - R6.06.00, CENTUM VP Entry Class R5.01.00 - R6.06.00, ProSafe-RS R3.01.00 - R4.04.00, PRM R4.01.00 - R4.02.00, B/M9000 VPR7.01.01 - R8.02.03 allows remote attackers to bypass access restriction to send malicious files to the PC wher...

CVE-2019-5909

License Manager Service of YOKOGAWA products CENTUM VP R5.01.00 - R6.06.00, CENTUM VP Entry Class R5.01.00 - R6.06.00, ProSafe-RS R3.01.00 - R4.04.00, PRM R4.01.00 - R4.02.00, B/M9000 VPR7.01.01 - R8.02.03 allows remote attackers to bypass access restriction to send malicious files to the PC wher...

The vulnerability of the License Manager Service, a system for automating the management of technological processes at Yokogawa companies, allows a perpetrator to execute arbitrary code.

The vulnerability of the License Manager Service, a system for automating the management of technological processes at Yokogawa, is related to errors in the checking of uploaded files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted...

Yokogawa License Manager Service

1. EXECUTIVE SUMMARY CVSS v8.1 ATTENTION : Exploitable remotely Vendor : Yokogawa Equipment : License Manager Service Vulnerability : Unrestricted Upload of Files with Dangerous Type 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to remotely upload files,...

Quest NetVault Backup Server < 11.4.5 Process Manager Service SQL Injection Remote Code Execution Vulnerability (ZDI-17-982)

The version of Quest NetVault Backup Server running on the remote host is prior to 11.4.5. It is, therefore, affected by an SQL injection SQLi remote code execution vulnerability in the process manager server due to improper validation of user-supplied input. An unauthenticated, remote attacker c...

The vulnerability of the `checkGrantUriPermissionLocked` function in the Android operating system’s Framework component, which allows a hacker to escalate their privileges

The vulnerability of the checkGrantUriPermissionLocked function in the ActivityManagerService.java file of the Android operating system’s framework is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges through a...

CVE-2018-9492

In checkGrantUriPermissionLocked of ActivityManagerService.java, there is a possible permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0...

Quest NetVault Backup NVBUEventHistory Get Method SQL Injection (CVE-2017-17412)

An SQL injection vulnerability exists in the Server Process Manager Service of Quest NetVault Backup. The vulnerability is due to improper validation of user-supplied input on JSON-RPC requests invoking the Get method of the NVBUEventHistory class...

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...