CVE-2016-8006

Authentication bypass vulnerability in Enterprise Security Manager ESM and License Manager LM in Intel Security McAfee Security Information and Event Management SIEM 9.6.0 MR3 allows an administrator to make changes to other SIEM users' information including user passwords without supplying the...

Nextcloud: No session logout after changing password & alsoandroid sessions not shown in sessions list so they can be deleted

There is no session logout after changing password and also if admin needs to disconnect some session of android no android sessions are shown in list If attacker has password and logins somehow using android app he may not be logged out as there are no session logout after changing password and...

CSRF vulnerability in icms backend

iCMS is an efficient content management system for small and medium-sized websites. A csrf vulnerability exists in the latest version of iCMS. Because the token is not validated in the /app/admincp/account.app.php dosave operation, an attacker can modify the administrator account password by...

XFINITY Gateway Technicolor Cross-Site Request Forgery Vulnerability

XFINITY Technicolor TC dpc3941T is a gateway product for multimedia from XFINITY USA. A cross-site request forgery vulnerability exists in Technicolor TC dpc3941T devices using the dpc3941-P20-18-v303r20421733-160413a-CMCST firmware. An attacker could use this vulnerability to change the Wi-Fi...

CVE-2016-5890

IBM Sterling B2B Integrator 5.2 before 502050014 and 5.2 06 before 50206021 allows remote authenticated users to change arbitrary passwords via unspecified vectors...

CVE-2016-5890

IBM Sterling B2B Integrator 5.2 before 502050014 and 5.2 06 before 50206021 allows remote authenticated users to change arbitrary passwords via unspecified vectors...

CVE-2016-5890

Consolidated details show CVE-2016-5890 affects IBM Sterling B2B Integrator 5.2 (Standard Edition) prior to 5020500_14 and 5.2 06 prior to 5020602_1. The vulnerability lets an authenticated user change another user’s password via unspecified vectors. The IBM security bulletin confirms the product...

CVE-2016-8647

An input validation vulnerability was found in Ansible's mysqluser module which may fail to correctly change a password in certain circumstances. Thus the previous password would still be active when it should have been changed...

CVE-2016-7238

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandle caching for NTLM password-change requests, which allows local users to gain privileges v...

CVE-2016-7238

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandle caching for NTLM password-change requests, which allows local users to gain privileges v...

Privilege escalation

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandle caching for NTLM password-change requests, which allows local users to gain privileges v...

CVE-2016-7238

CVE-2016-7238 is a local privilege-escalation vulnerability in Windows NTLM password-change caching across multiple Windows versions (Vista through Windows Server 2016). An attacker with local access could craft an application to trigger privilege escalation. The issue arises from incorrect cachi...

Microsoft Windows NTLM Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows NTLM. Due to incorrect caching of NTLM password change requests, a local attacker can exploit the vulnerability to elevate privileges...

Windows NTLM Elevation of Privilege Vulnerability

A local elevation of privilege vulnerability exists when Windows fails to properly handle NTLM password change requests. An attacker who successfully exploited this vulnerability could elevate the attacker's permissions from unprivileged user account to administrator. The attacker could then...

Acoem 01dB DUO Smart Noise Monitor Remote Password Change Vulnerability

Exploit for hardware platform in category remote exploits !/bin/sh Acoem 01dB DUO Smart Noise Monitor Remote Password Change HW version: LIS1005G Application FW: 2.34 Metrology FW: 2.10 Modem FW: 08.01.108 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/...

MS16-137: Security update for Windows authentication methods: November 8, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow elevation of privilege. To exploit this vulnerability, the attacker would first have to...

MS16-137: Security Update for Windows Authentication Methods (3199173)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in Windows Virtual Secure Mode due to improper handling of objects in memory. An authenticated, remote attacker can exploit this, via a...

Acoem 01dB CUBEDUO Smart Noise Monitor - Password Change

Acoem 01dB CUBEDUO Smart Noise Monitor - Password Change !/bin/sh Acoem 01dB CUBE Smart Noise Monitoring Terminal Remote Password Change HW version: LIS001A Application FW: 2.34 Metrology FW: 2.10 Modem FW: 12.00.005 / 08.01.108 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/...

Acoem 01dB CUBE/DUO Smart Noise Monitor - Password Change

!/bin/sh Acoem 01dB CUBE Smart Noise Monitoring Terminal Remote Password Change HW version: LIS001A Application FW: 2.34 Metrology FW: 2.10 Modem FW: 12.00.005 / 08.01.108 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or...

Acoem 01dB CUBE Smart Noise Monitoring Terminal Remote Password Change

!/bin/sh Acoem 01dB CUBE Smart Noise Monitoring Terminal Remote Password Change HW version: LIS001A Application FW: 2.34 Metrology FW: 2.10 Modem FW: 12.00.005 Copyright 2016 c Todor Donev https://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous...