UsoDllLoader - Windows - Weaponizing Privileged File Writes With The Update Session Orchestrator Service

2020-06-06 Update: this trick no longer works on the latest builds of Windows 10 Insider Preview. This means that, although it still works on the mainstream version ofWindows 10, you should expect it to be patched in the coming months. Description This PoC shows a technique that can be used to...

CVE-2019-6196

A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation...

CVE-2019-6196

A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and installation...

BullGuard Premium Protection Privileged File Deletion Vulnerability

BullGuard Premium Protection is a computer network security suite from BullGuard UK. A competitive conditions issue vulnerability exists in the malware scanning feature in BullGuard Premium Protection version 20.0.371.8. The vulnerability arises from improper handling of concurrent access when...

CVE-2019-13528

A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 JACE 3e, JACE 6e, JACE 7, JACE-8000, Niagara 4.4u3 JACE 3e, JACE 6e, JACE 7, JACE-8000, and Niagara 4.7u1 JACE-8000, Edge 10...

CVE-2019-14220

An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows. BlueStacks employs Android running in a virtual machine VM to enable Android apps to run on Windows or MacOS. Bug is in a local arbitrary file read through a system service call. The impacted method...

Microsoft Windows NTFS Privileged File Access Enumeration Exploit

Microsoft Windows suffers from an NTFS privileged file access enumeration vulnerability. Attackers possessing user-only rights can gather intelligence or profile other user account activities by brute forcing a correct file name due to inconsistent error messaging. + Credits: John Page aka...

Windows NTFS - Privileged File Access Enumeration

Windows NTFS - Privileged File Access Enumeration + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-NTFS-PRIVILEGED-FILE-ACCESS-ENUMERATION.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Windows...

Microsoft Windows NTFS - Privileged File Access Enumeration

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-NTFS-PRIVILEGED-FILE-ACCESS-ENUMERATION.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Windows NTFS NTFS is a proprietary journaling file system...

SUSE-SU-2019:1806-1 Security update for libdlm, libqb

This update for libdlm, libqb fixes the following issues: libqb to version 1.0.3: - CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could have allowed a local attacker to overwrite privileged system files bsc1137835. - Enabled use of filesystem sockets for linux fate32341...

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup, related to lack of access control, allows attackers to perform file writing in a privileged mode.

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup is related to lack of access control. Exploiting this vulnerability allows a malicious actor to perform file writing in a privileged mode, using the “bprd” process...

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup, related to lack of access control, allows attackers to perform file writing in a privileged mode.

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup is related to lack of access control. Exploiting this vulnerability allows a malicious actor to perform file writing in a privileged mode, using the “bprd” process...

Windows UAC Bypass Hack Leaves Systems Open to Malicious DLLs

Researchers have crafted a stealthy new way of bypassing Windows User Account Controls UAC that opens the door to attacks on targeted systems. According researchers, the bypass technique can fly under the radar of security solutions that monitor for this type of circumvention. The UAC bypass...

Microsoft Windows Kernel Security Feature Bypass (MS15-115: CVE-2015-6113)

A kernel security feature bypass vulnerability has been reported in Microsoft Windows. A remote attacker may exploit this vulnerability by calling a procedure which bypasses access check and allows privileged file access...

Cisco Secure Access Control Server Arbitrary Code Execution Vulnerability

Cisco Secure Access Control Server ACS is a secure access control server from Cisco USA. The server provides a comprehensive identity-based access control solution for Cisco intelligent information networks. A security vulnerability exists in Cisco Secure ACS that stems from the program's use of...

Apache 2.0.4x mod_php Module File Descriptor Leakage Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/9302/info Reportedly, the Apache modphp module may be prone to a vulnerability that may allow a local attacker to gain access to privileged file descriptors. As a result, the attacker may pose as a legitimate server and...

CVE-2010-0790

sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name...

ePolicy Orchestrator Symlink Arbitrary Privileged File Access

The remote host is running ePolicy Orchestrator / ProtectionPilot, a system security management solution from McAfee. According to its banner, the Common Management Agent CMA associated with ePolicy Orchestrator / ProtectionPilot on the remote host can be used by local users to view files residin...

Multiple Abuse game vulnerabilities

Buffer overflow, privileged file access...

security flaw

KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of...