WiX Toolset DLL Hijacking

Hi @ll, executable installers ° created with the WiX Toolset see , and of course the WiX Toolset installer itself too resp. using its bootstrapper "burn.exe" are vulnerable: see 1. They load and execute a rogue/bogus/malicious FEClient.dll ' and other DLLs too, dependent on the version of Windows...

WEG SuperDrive G2 12.0.0 - Insecure File Permissions

WEG SuperDrive G2 v12.0.0 Insecure File Permissions Vendor: WEG Group Product web page: http://www.weg.net Affected version: SuperDrive G2 v12.0.0 Build 20150930-J1.8.060-NB8.0.2 SuperDrive v7.0.0 Summary: SuperDrive is a Windows graph tool for parameter setting, control and monitor of WEG...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2016-00254)

Microsoft Windows is a popular operating system. Microsoft Windows fails to properly load DLL files, allowing attackers to exploit the vulnerability to build special files that can be tricked into being parsed by users to elevate privileges...

Fortinet FortiClient Linux SSLVPN build elevation of privilege vulnerability

Fortinet FortiClient Linux SSLVPN is a Linux-based VPN client for connecting to Fortinet devices. An elevation of privilege vulnerability exists in versions prior to Fortinet FortiClient Linux SSLVPN build 2313, which allows local users to gain privileges via the assistant/sabloid etuid program...

CVE-2016-0006

The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a...

CVE-2016-0007

The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a...

CVE-2016-0005

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2016-0006

CVE-2016-0006 is a local privilege-escalation vulnerability in the Windows sandbox implementation where reparse points are mishandled. A crafted application can escalate privileges on affected systems by exploiting this flaw. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2...

Microsoft Windows Privilege Elevation Vulnerabilities (3124605)

This host is missing an important security update according to Microsoft Bulletin MS16-008 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-008: Description of the security update for Windows Kernel: January 12, 2016

None None...

Android Trustzone elevation of privilege vulnerability, CVE-2 0 1 5-6 6 3 9-a vulnerability warning-the black bar safety net

Affected system: Android Android Description: CVECAN ID: CVE-2 0 1 5-6 6 3 9 Android is a Linux-based open kernel Phoneoperating system. Android 5.1.1 LMY49F before 5. x version, 2016-01-0 1 before the 6. 0 version, Trustzone applications on the realization of the presence of security...

Lenovo Solution Center 'LSCTaskService' Local Lift Vulnerability

Lenovo Solution Center is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. A local elevation of privilege vulnerability exists in Lenovo Solution Center. A local attacker can exploit...

ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...

ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...

ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...

ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...

Huawei Video Content Management Elevation of Privilege Vulnerability

Huawei Video Content Management is a video content management system from Huawei, China. A security vulnerability exists in Huawei Video Content Management that could be exploited by attackers to elevate privileges and perform unauthorized operations...

Android System Server Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. Versions of System Server prior to Android 6.0 2015-12-01 have a security vulnerability in their implementation, which can be exploited by a remote attacker to gain access to sensitive information and then elevate privileges...

CVE-2015-6173

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory...

Microsoft Windows Core Memory Privilege Elevation Vulnerability (CNVD-2015-08020)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Microsoft Windows kernel that arises from a program's failure to properly handle objects in memory. An attacker could exploit the vulnerability to r...