CVE-2016-8225

The CVE-2016-8225 entry concerns Lenovo Edge USB Keyboard Driver (also called Lenovo Slim USB Keyboard/Low Profile Keyboard) on Windows. The advisory LEN-11588 indicates a local privilege escalation vulnerability when the driver is prior to version 1.21. The root issue is exposed as a local explo...

CVE-2016-8225: Unquoted Search Path or Element

Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges...

PT-2017-9540

Name of the Vulnerable Software and Affected Versions Lenovo Edge and Lenovo Slim USB Keyboard Driver versions prior to 1.21 Description The issue allows local users to execute code with elevated privileges due to an unquoted service path vulnerability. Recommendations For versions prior to 1.21,...

Lenovo Slim USB Keyboard 1.09 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Lenovo Slim USB Keyboard - Unquoted Service Path Privilege Escalation Date: 10/19/2016 Exploit Author: Joey Lane Version: 1.09 Tested on: Windows 7 Professional The Lenovo Slim USB Keyboard service is installed with an unquote...

Lenovo Slim USB Keyboard 1.09 - Unquoted Service Path Privilege Escalation

Lenovo Slim USB Keyboard 1.09 - Unquoted Service Path Privilege Escalation Exploit Title: Lenovo Slim USB Keyboard - Unquoted Service Path Privilege Escalation Date: 10/19/2016 Exploit Author: Joey Lane Version: 1.09 Tested on: Windows 7 Professional The Lenovo Slim USB Keyboard service is...

Lenovo Slim USB Keyboard 1.09 - Unquoted Service Path Privilege Escalation

Exploit Title: Lenovo Slim USB Keyboard - Unquoted Service Path Privilege Escalation Date: 10/19/2016 Exploit Author: Joey Lane Version: 1.09 Tested on: Windows 7 Professional The Lenovo Slim USB Keyboard service is installed with an unquoted service path. This enables a local privilege escalatio...

Slim CMS 0.1 Cross Site Request Forgery

input type="hidden" name="url" value="http://localhost/SlimCMS"...

SlimCMS 0.1 - Cross-Site Request Forgery (Change Admin Password)

Exploit for php platform in category web applications input ty...

SlimCMS 0.1 - Cross-Site Request Forgery (Change Admin Password)

input type="hidden" name="url" value="http&58...

the php framework slim architecture on the presence of the XXE vulnerability, XXE typically present in the form of-vulnerability warning-the black bar safety net

Modern cms framework laraval/symfony/slim, leading to today's php vulnerability appears point, principle, using method, has undergone some changes, this series can hope to summarize their excavation of such a cms vulnerability. slim is one of the design ideas ahead of the well-known of php light...

CVE-2015-2171

Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data...

Design/Logic Flaw

Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data...

CVE-2015-2171

Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data...

CVE-2015-2171

Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data...

CVE-2015-2171

Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data...

CVE-2015-2171

CVE-2015-2171 affects the Slim PHP framework; vulnerable component is Middleware/SessionCookie.php in Slim before 2.6.0. The issue allows remote attackers to perform PHP object injection via crafted session data, enabling arbitrary code execution on the server. The root cause is deserialization o...

CVE-2015-2171: Improper Control of Generation of Code

Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data...

PT-2015-5643

Name of the Vulnerable Software and Affected Versions Slim versions prior to 2.6.0 Description The issue allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data in the Middleware/SessionCookie.php file. Recommendations For versions...

Slim PHP Framework 'SessionCookie.php' Remote PHP Object Injection Vulnerability

Slim PHP Framework is an American software developer Josh Lockhart developed a set of miniature PHP5 framework , it can be used to create RESTful Web applications and APIs. A remote PHP object injection vulnerability exists in Slim PHP Framework 2.5.0 and earlier versions. An attacker can exploit...

PHP object injection attack vulnerability in Slim.

https://github.com/slimphp/Slim/blob/master/Slim/Middleware/SessionCookie.phpL127 Generally, it's a bad idea to blindly unserialize user-controllable input. https://www.owasp.org/index.php/PHPObjectInjection EDIT - for people who don't want to read the whole thread: The SessionCookie class is not...