InstantHMI 6.1 - Privilege Escalation

Exploit for windows platform in category local exploits Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows...

SOL05715414 - Apache CloudStack vulnerability CVE-2016-3085

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

Microsoft Windows Kernel 'Win32k.sys' CVE-2016-3221 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

Microsoft Windows Virtual PCI CVE-2016-3232 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Recommendations Permit...

Microsoft Exchange Server CVE-2016-0028 Information Disclosure Vulnerability

Description Microsoft Exchange Server is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 are vulnerable. Technologies...

PT-2016-2309

Name of the Vulnerable Software and Affected Versions Apache Commons Fileupload versions prior to 1.3.2 Apache Tomcat versions prior to 7.0.70 Apache Tomcat versions prior to 8.0.36 Apache Tomcat versions prior to 8.5.3 Apache Tomcat versions prior to 9.0.0.M7 Description The issue allows remote...

PT-2016-6144 · Pulse · Pulse Connect Secure

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure PCS versions 7.4 through 7.4r13.3 Pulse Connect Secure PCS versions 8.0 through 8.0r8 Pulse Connect Secure PCS versions 8.1 through 8.1r1 Pulse Connect Secure PCS versions 8.2 through 8.2r0 Description: A cross-site...

Microsoft Windows Kernel CVE-2016-0175 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to a local security-bypass vulnerability. A local attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based...

Response Operation Collection Kit: ROCK NSM

MOCYBER’s open source Network Security Monitoring platform ROCK is a collections platform, in the spirit of Network Security Monitoring, designed by members of the Missouri National Guard’s Cyber Team. It’s primary focus is to provide a robust, scalable sensor platform for both enduring security...

Microsoft Internet Explorer CVE-2016-0162 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer ...

PT-2016-3367

Name of the Vulnerable Software and Affected Versions Pivotal Spring Framework versions prior to 6.0.0 Pivotal Spring Framework versions 4.2.6 and 3.2.17 Pivotal Spring Framework versions 5.3.0 through 5.3.16 Description The issue is related to the implementation of the readRemoteInvocation metho...

VMSA-2016-0002:VMware product updates address a CRITICAL glibc security vulnerability.

VMSA-2016-0002.1 VMware product updates address a critical glibc security vulnerability. VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0002.1 VMware Security Advisory Synopsis: VMware product updates address a critical glibc security vulnerability VMware Security Adviso...

Microsoft Windows CVE-2016-0041 DLL Loading Multiple Local Privilege Escalation Vulnerabilities

Description Microsoft Windows is prone to a multiple local privilege-escalation vulnerabilities. A local attacker can leverage these issues to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Internet Explorer 10 Microsoft Internet Explorer 11 Microsoft Windows 10...

Microsoft Network Policy Server RADIUS Implementation CVE-2016-0050 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial of service vulnerability. Successful exploits may allow the attacker to cause a denial of service condition. Technologies Affected Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft...

Microsoft Edge CVE-2016-0084 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

PT-2016-1144 · FFmpeg +1 · Ffmpeg +1

Name of the Vulnerable Software and Affected Versions: FFmpeg versions 2.x Description: The issue allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming HLS M3U8 file. This leads to an external HTTP request where the...

SOL75136237 - Privilege escalation vulnerability CVE-2015-7393

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

PT-2015-2867

Name of the Vulnerable Software and Affected Versions Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18 Juniper ScreenOS versions 6.3.0r12 before 6.3.0r12b Juniper ScreenOS versions 6.3.0r13 before 6.3.0r13b Juniper ScreenOS versions 6.3.0r14 before 6.3.0r14b Juniper ScreenOS versions 6.3.0r15...

PT-2018-05: Unauthorized Firmware Modification in Siemens EN100 Ethernet modules

The specialists of the Positive Research center have detected an Unauthorized Firmware Modification vulnerability in Siemens EN100 Ethernet modules. Vulnerability allows unauthenticated attackers to upgrade or downgrade the firmware of the affected device including to older versions with known...

Microsoft Internet Explorer XSS Filter CVE-2015-6138 Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability that affects the XSS Filter. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. They can then execute arbitrary script code in the context of th...