The vulnerability of the analytical platform HPE Vertica Analytics Platform, related to deficiencies in access control, allows a malicious individual to increase their privileges.

The vulnerability of the HPE Vertica Analytics Platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to increase their privileges...

Apache CouchDB 1.7.0 / 2.x Remote Privilege Escalation

Exploit Title: Apache CouchDB JSON 1.7.0 and 2.x before 2.1.1 - Remote Privilege Escalation Date: 2017-08-07 Exploit Author: SebastiA!n Castro @r4wd3r Vendor Homepage: https://blog.couchdb.org/2017/11/14/apache-couchdb-cve-2017-12635-and-cve-2017-12636/ Software Link: http://couchdb.apache.org/...

Apache CouchDB 1.7.0 2.x 2.1.1 - Remote Privilege Escalation

Apache CouchDB 1.7.0 2.x 2.1.1 - Remote Privilege Escalation !/usr/bin/env python ''' @author: r4wd3r @license: MIT License @contact: [email protected] ''' import argparse import re import sys import requests parser = argparse.ArgumentParser description='Exploits the Apache CouchDB JSON Remote...

Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation

!/usr/bin/env python ''' @author: r4wd3r @license: MIT License @contact: [email protected] ''' import argparse import re import sys import requests parser = argparse.ArgumentParser description='Exploits the Apache CouchDB JSON Remote Privilege Escalation Vulnerability' + ' CVE-2017-12635'...

Microsoft SharePoint Server CVE-2018-1005 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

Microsoft SharePoint Server CVE-2018-1034 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

Microsoft SharePoint Server CVE-2018-1014 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

Microsoft SharePoint Server CVE-2018-1032 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

CVE-2017-13272

In alarmreadygeneric of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0,...

Out-of-bounds

In alarmreadygeneric of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0,...

CVE-2017-13272

CVE-2017-13272 affects Android (7.0–8.1). The issue is an out-of-bounds write caused by a use-after-free in alarm_ready_generic (alarm.cc), enabling remote escalation of privilege with no user interaction. CVSSv3 base score 9.8 (Network, High impact on confidentiality, integrity, availability). T...

CVE-2017-13284

In configsetstring of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

CVE-2017-13267

In avrcparsvendorcmd of avrcparstg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0...

The vulnerability in the Boot2Docker script collection, related to access control deficiencies, allows an attacker to enhance their privileges and execute arbitrary code.

The vulnerability in the Boot2Docker script is related to access control deficiencies when connecting to a Docker daemon using TCP connections. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code remotely...

CVE-2018-6231

A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server Standalone versions 3.3 and below could allow remote attackers to escalate privileges on vulnerable installations...

Microsoft SharePoint Remote Elevation of Privilege Vulnerability (CNVD-2018-07006)

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 are both products of Microsoft Corporation, U.S.A. Microsoft Project Server is a suite of Project Portfolio Management PPM and day to day Microsoft Project Server is a project management solution for project portfolio...

Microsoft SharePoint Remote Elevation of Privilege Vulnerability (CNVD-2018-07009)

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 are both products of Microsoft Corporation, U.S.A. Microsoft Project Server is a suite of Project Portfolio Management PPM and day to day Microsoft Project Server is a project management solution for project portfolio...

Microsoft SharePoint Remote Elevation of Privilege Vulnerability (CNVD-2018-07004)

Microsoft Project Server 2013 SP1 and SharePoint Enterprise Server 2016 are both products of Microsoft Corporation.Microsoft Project Server 2013 SP1 is a suite of project management solutions for project portfolio management PPM and Microsoft Project Server 2013 SP1 is a project management soluti...

Microsoft SharePoint Remote Elevation of Privilege Vulnerability (CNVD-2018-07007)

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 are both products of Microsoft Corporation, U.S.A. Microsoft Project Server is a suite of Project Portfolio Management PPM and day to day Microsoft Project Server is a project management solution for project portfolio...

Microsoft SharePoint Remote Elevation of Privilege Vulnerability (CNVD-2018-07008)

Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 are both products of Microsoft Corporation, U.S.A. Microsoft Project Server is a suite of Project Portfolio Management PPM and day to day Microsoft Project Server is a project management solution for project portfolio...