The vulnerability of the auth_svc function in the Caldera automated system for emulating hacker actions allows a hacker to increase their privileges.

The vulnerability of the authsvc function in the Caldera Calibur emulation system is related to errors in processing the “localhost” string in the HTTP header of the host. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the VMware Directory Service (vmdir), a management service for virtual infrastructure, allows a attacker to escalate their privileges.

The vulnerability of the VMware Directory Service vmdir, a component of the VMware vCenter Server virtualization infrastructure management tool, is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

PT-2020-2027

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions prior to the fixed version Description The issue is related to insufficient access control in the VMware Directory Service vmdir of VMware vCenter Server. This can allow a remote attacker to elevate their...

The vulnerability of the RSLogix 500 software, the programmable logic controllers MicroLogix 1100 and MicroLogix 1400, arises from the use of a rigidly encrypted cryptographic key, which allows an intruder to gain enhanced privileges.

The vulnerability of the RSLogix 500 software, the programmable logic controllers MicroLogix 1100, and MicroLogix lies in the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

The vulnerability of the Microsoft Exchange Server mail server, related to errors in memory object processing, allows attackers to escalate their privileges.

The vulnerability of Microsoft Exchange Server is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the K7TSHlpr.dll module in antivirus protection tools such as K7 Antivirus Premium, K7 Total Security, and K7 Ultimate Security allows attackers to escalate their privileges.

The vulnerability of the K7TSHlpr.dll module in antivirus protection tools such as K7 Antivirus Premium, K7 Total Security, and K7 Ultimate Security is related to errors in inter-process communication. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the STARTTLS component of the Keycloak identity and access management software lies in implementation errors related to authentication procedures. This allows attackers to escalate their privileges.

The vulnerability of the STARTTLS component of the Keycloak identity and access management software is related to implementation errors in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the SAP NetWeaver software integration platform, caused by deficiencies in the authentication process, allows attackers to increase their privileges.

The vulnerability of the SAP NetWeaver software integration platform is due to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of SAP Leasing software, related to authentication errors, allows a perpetrator to increase their privileges.

The vulnerability of SAP Leasing software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of D-Link DIR-601 router’s microprogramming software, related to authentication deficiencies, allows attackers to escalate their privileges.

The vulnerability of D-Link DIR-601 router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation Exploit

Exploit for java platform in category web applications Exploit Title: Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation Discovered by: Elwood Buck & Nolan B. Kennedy of Mindpoint Group Exploit Author: Nolan B. Kennedy nxkennedy Discovery date: 2019-09-20 Vendor Homepage:...

Kronos WebTA 4.0 Privilege Escalation / Cross Site Scripting

Exploit Title: Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation Discovered by: Elwood Buck & Nolan B. Kennedy of Mindpoint Group Exploit Author: Nolan B. Kennedy nxkennedy Discovery date: 2019-09-20 Vendor Homepage: https://www.kronos.com/products/kronos-webta Version: 3.8.x - 4.0...

Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation

Exploit Title: Kronos WebTA 4.0 - Authenticated Remote Privilege Escalation Discovered by: Elwood Buck & Nolan B. Kennedy of Mindpoint Group Exploit Author: Nolan B. Kennedy nxkennedy Discovery date: 2019-09-20 Vendor Homepage: https://www.kronos.com/products/kronos-webta Version: 3.8.x - 4.0...

Kronos WebTA "com.threeis.webta.H491delegate" servlet elevation of privilege vulnerability (CNVD-2020-14347)

Kronos WebTA is an attendance system. A security vulnerability exists in the Kronos WebTA "com.threeis.webta.H491delegate" servlet, which can be exploited by a remote attacker to submit a special request that can elevate privileges...

The vulnerability of SAP NetWeaver Java Application Server web applications, related to insecure management of privileges, allows attackers to escalate their privileges.

The vulnerability of SAP NetWeaver Java Application Server web applications is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of Cisco Small Business RV016, RV042, RV042G, and RV082 router microprogramming software lies in the presence of embedded authentication data (a static H.509 certificate), which allows attackers to escalate their privileges.

The vulnerability of Cisco Small Business RV016, RV042, RV042G, and RV082 router microprogramming software is related to the presence of embedded authentication data static certificate H.509. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the SAP Treasury and Risk Management software regarding access control deficiencies allows attackers to enhance their privileges.

The vulnerability of the SAP Treasury and Risk Management software for managing financial instruments and risks is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the ZyXEL P-1302-T10D v3 router’s microprogramming software, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the ZyXEL P-1302-T10D v3 router’s microprogramming software is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of Cisco RV320 and Cisco RV325 microprogrammed software lies in the presence of a hard-coded pair of open/closed key H.509 certificates and a static SSH host key, which allows an attacker to elevate their privileges.

The vulnerability of Cisco RV320 and Cisco RV325 router microprogramming software is related to the presence of a tightly encrypted pair of open/closed keys H.509 certificate and a static SSH host key. Exploiting this vulnerability allows an attacker operating remotely to enhance their privileges...

The vulnerability of software for integrating SAP NetWeaver Process Integration corporate applications, related to authentication errors, allows attackers to increase their privileges.

The vulnerability of the software for integrating SAP NetWeaver Process Integration corporate applications is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...