CVE-2016-8102

Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch processes with elevated privileges...

CVE-2016-8102

CVE-2016-8102 is an Unquoted service path vulnerability in Intel Wireless Bluetooth Driver packages (16.x, 17.x, and before 18.1.1607.3129) that allows a local attacker with elevated privileges to cause code execution when the driver loads. The root cause is an unquoted service path, enabling a l...

Intel® Wireless Bluetooth® Driver Unquoted Service Path

Summary: There is a security vulnerability in the Intel® Wireless Bluetooth® drivers 16.x/17.x and all 18.x versions prior to 18.1.1607.3129 02/26/2016 known as an “Unquoted Service Path”. All drivers posted with version 18.1.1607.3129 and above due not contain the disclosed vulnerability...

Huawei UTPS - Unquoted Service Path Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Unquoted Service Path Vulnerability in Huawei UTPS Software Date: Nov 16 2016 Author: Dhruv Shah @Snypter Website: http://security-geek.in Contact: email protected Category: local Vendor Homepage: http://www.huawei.com/ Versio...

Huawei UTPS UTPS-V200R003B015D16SPC00C983 Privilege Escalation

Exploit Title: Unquoted Service Path Vulnerability in Huawei UTPS Software Date: Nov 16 2016 Author: Dhruv Shah @Snypter Website: http://security-geek.in Contact: [email protected] Category: local Vendor Homepage: http://www.huawei.com/ Version: Versions earlier than UTPS-V200R003B015D16SPC00C9...

Huawei UTPS - Unquoted Service Path Privilege Escalation

Huawei UTPS - Unquoted Service Path Privilege Escalation Exploit Title: Unquoted Service Path Vulnerability in Huawei UTPS Software Date: Nov 16 2016 Author: Dhruv Shah @Snypter Website: http://security-geek.in Contact: [email protected] Category: local Vendor Homepage: http://www.huawei.com/...

Huawei UTPS - Unquoted Service Path Privilege Escalation

Exploit Title: Unquoted Service Path Vulnerability in Huawei UTPS Software Date: Nov 16 2016 Author: Dhruv Shah @Snypter Website: http://security-geek.in Contact: [email protected] Category: local Vendor Homepage: http://www.huawei.com/ Version: Versions earlier than UTPS-V200R003B015D16SPC00C9...

Elevation of Privilege Vulnerability in Huawei UTPS

Huawei UTPS Unified Terminal PC suite, also known as Mobile Partner is an application software that runs on a PC to manage the data card, providing functions such as data card setup, dial-up connection, sending and receiving text messages, and managing the phonebook. Huawei UTPS suffers from an...

Security Advisory - Unquoted Service Path Vulnerability in Huawei UTPS Software

Huawei Unified Terminal PC suite UTPS, also known as Mobile Partner, runs on the PC side to manage data cards. It provides data card setting, dial-up setting, message sending and receiving, and contacts management functions. Huawei UTPS has an unquoted service path vulnerability which can lead to...

Reason Core Security 1.1.2 Privilege Escalation

===================================================== Exploit Title : Reason Core Security - Unquoted Service Path Privilege Escalation Affected Products: Reason Core Security v1.1.2 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 10...

Reason Core Security 1.1.2 Privilege Escalation Vulnerability

Reason Core Security version 1.1.2 suffers from an unquoted service path privilege escalation vulnerability. ===================================================== Exploit Title : Reason Core Security - Unquoted Service Path Privilege Escalation Affected Products: Reason Core Security v1.1.2 -...

Intel Identity Protection Technology Host Interface Service 1.2.22.0 Privilege Escalation Vulnerabil

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ============= www.intel.com Product: ======== Intel Identity Protection Technology Host Interface Service jhiservice.exe v1.2.22.0 Vulnerability Type: =================== Privilege Escalation Unquot...

Intel Management And Security LMS.exe 7.1.13.1088 Privilege Escalation Vulnerability

Intel Management and Security Application Local Management Service LMS.exe version 7.1.13.1088 suffers from a privilege escalation vulnerability. + Credits: John Page aka hyp3rlinx Vendor: ============= www.intel.com Product: =========== Intel Management and Security Application Local Management...

Nero 7.10.1.0 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Nero 7 Unquoted Service Path Elevation Of Privilege Disclosure Date: 09/11/2016 Exploit Author: Boumediene KADDOUR a.k.a Sh311c0d3r http://www.realistic-security.org Version: Nero version 7.10.1.0 Tested on: Windows 7 integral...

Intel Management And Security LMS.exe 7.1.13.1088 Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/INTEL-LOCAL-MGTM-SERVICE-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ============= www.intel.com Product: =========== Intel Management and Security Application Local...

Nero 7.10.1.0 Privilege Escalation

Exploit Title: Nero 7 Unquoted Service Path Elevation Of Privilege Disclosure Date: 09/11/2016 Exploit Author: Boumediene KADDOUR a.k.a Sh311c0d3r http://www.realistic-security.org Version: Nero version 7.10.1.0 Tested on: Windows 7 integral edition FR CVE : N/A Vulnerability Details:...

Samsung SW Update Service Privilege Escalation Vulnerability

Samsung Software Update Service, SWUpdateService SWMAgent.exe, installs as a service with an unquoted service path running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. Exploit...

Samsung SW Update Service Privilege Escalation

Exploit Title: Samsung SW Update Service Unquoted Service Path Privilege Escalation Date: 04/10/2016 Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH && Superbug @xsuperbug Website: http://yildirimyunus.com Contact: [email protected] Category: local Vendor Homepage:...

Droid4X Privilege Escalation

Exploit Title: Droid4X Unquoted Service Path Privilege Escalation Date: 03/10/2016 Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH && Superbug @xsuperbug Website: http://yildirimyunus.com Contact: [email protected] Category: local Vendor Homepage: http://www.droid4x.com/...

CVE-2016-5852

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...