Multiple Trend Micro Product Privilege Access Control Vulnerabilities (CNVD-2018-17418)

Trend Micro Premium Security and others are cross-platform antivirus products from Trend Micro that feature anti-ransomware, anti-malware email and system optimization. The privilege access control vulnerability exists in several Trend Micro products and stems from the coreServiceShell service...

The vulnerability of the SchRpcSetSecurity function in the Advanced Local Procedure Call interface of the Windows operating system’s task scheduler allows a malicious actor to execute malicious code with SYSTEM privileges.

The vulnerability of the SchRpcSetSecurity function in the Advanced Local Procedure Call ALPC interface of the Windows operating system’s task scheduler is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute malicious code with SYSTEM privileges...

R 3.4.4 - Buffer Overflow (SEH)

R 3.4.4 - Buffer Overflow SEH -------------------------------------------------------- Exploit Title: R v3.4.4 - SEH Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-08-22 Vendor Homepage : https://www.r-project.org/ Tested on OS: Windows 7 Social: twitter.com/ZwX2a contact:...

R 3.4.4 Bufer Overflow

-------------------------------------------------------- Exploit Title: R v3.4.4 - SEH Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-08-22 Vendor Homepage : https://www.r-project.org/ Tested on OS: Windows 7 Social: twitter.com/ZwX2a contact: [email protected] Website:...

Microsoft Windows task scheduler contains a local privilege escalation vulnerability in the ALPC interface

Overview Microsoft Windows task scheduler contains a local privilege escalation vulnerability in the Advanced Local Procedure Call ALPC interface, which can allow a local user to obtain SYSTEM privileges. Description The Microsoft Windows task scheduler SchRpcSetSecurity API contains a...

R v3.4.4 Software - (SEH) Buffer Overflow Vulnerability

Document Title: =============== R v3.4.4 Software - SEH Buffer Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2143 Release Date: ============= 2018-08-27 Vulnerability Laboratory ID VL-ID: ==================================== 214...

The vulnerability of the Microsoft Exchange Server mail server, related to errors in memory object processing, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges remotely...

Adobe Flash Player elevation of privilege vulnerability (CNVD-2018-18451)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. An elevation of privilege vulnerability exists in Adobe Flash Player. A remote attacker could exploit this...

Novell NetIQ Access Manager dhost Service Shared Memory Section Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Novell NetIQ Access Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

OpenEMR Remote Code Execution Vulnerability

OpenEMR is the open source electronic health record and medical practice management solution. OpenEMR suffers from a remote code execution vulnerability. Due to the failure to strictly filter incoming parameters when modifying configurations in the background, an attacker can exploit the...

CVE-2017-3210

Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using the Portrait Displays SDK do not use secure permissions when running. These applications run the...

Design/Logic Flaw

Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using the Portrait Displays SDK do not use secure permissions when running. These applications run the...

The vulnerability of the Accessibility Framework component of the Mac OS X operating system allows a perpetrator to execute arbitrary code with system privileges or disclose protected information.

The vulnerability of the Accessibility Framework component in the Mac OS X operating system is related to insufficient access control. Exploiting this vulnerability allows an attacker to execute arbitrary code with system privileges or disclose sensitive information through a specially created...

The vulnerability of the Windows Server operating system component in Mac OS X allows a hacker to execute arbitrary code with system privileges or cause a service failure.

The vulnerability of the Windows Server operating system component in Mac OS X is caused by an overflow in memory buffers. Exploiting this vulnerability can allow an attacker to execute arbitrary code with system privileges or cause a service failure using a specially created application...

CVE-2016-9485

On Windows endpoints, the SecureConnector agent must run under the local SYSTEM account or another administrator account in order to enable full functionality of the agent. The typical configuration is for the agent to run as a Windows service under the local SYSTEM account. The SecureConnector...

UBUNTU-CVE-2018-9415

In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel...

The vulnerability of the Microsoft Exchange Server mail server arises from a transaction that occurs outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with SYSTEM-level privileges by sending a specially crafted email to the...

Security Bulletin:Vulnerabilities in Apache Tomcat and OpenSSL affect Rational BuildForge

Summary OpenSSL and Apache Tomcat vulnerabilities were disclosed recently, OpenSSL and Apache Tomcat are used by Rational BuildForge. Rational BuildForge has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-1240 DESCRIPTION: Apache Tomcat could allow a local attacker to gain...

The vulnerability of the nordvpn-service software’s VPN service allows a perpetrator to execute arbitrary code with SYSTEM privileges.

The vulnerability of the nordvpn-service software’s VPN service is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with SYSTEM privileges using a single OpenVPN command...

The vulnerability of the Microsoft Malware Protection Engine, which is used in Microsoft’s built-in security tools, allows a malicious actor to execute arbitrary code with SYSTEM privileges and gain full control over the system.

The vulnerability of the Microsoft Malware Protection Engine, which is used in Microsoft’s built-in security mechanisms, relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges and...