Code injection

WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit th...

CVE-2016-10031

WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit th...

Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation

Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation ===================================================== Vendor Homepage: http://www.wampserver.com/ Date: 10 Dec 2016 Version : Wampserver 3.0.6 32 bit x86 Tested on: Windows 7 Ultimate SP1 EN Author: Heliand Dema Contact:...

Reason Core Security Elevation of Privilege Vulnerability

Reason Core Security is an antivirus security product that also detects system security and removes malware and adware. An elevation of privilege vulnerability exists in version 1.1.2.0 of Reason Core Security. The vulnerability stems from the fact that the program is installed by default with th...

Wampserver 3.0.6 Privilege Escalation

===================================================== Vendor Homepage: http://www.wampserver.com/ Date: 10 Dec 2016 Version : Wampserver 3.0.6 32 bit x86 Tested on: Windows 7 Ultimate SP1 EN Author: Heliand Dema Contact: [email protected] CVE: 2016-10031...

Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits ===================================================== Vendor Homepage: http://www.wampserver.com/ Date: 10 Dec 2016 Version : Wampserver 3.0.6 32 bit x86 Tested on: Windows 7 Ultimate SP1 EN Author: Heliand Dema Contact: email protected...

Viscosity OpenVPN 2.3 Privilege Escalation Vulnerability

Viscosity Open VPN version 2.3 suffers from an unquoted service path local privilege escalation vulnerability. Title : Viscosity Open VPN 2.3 Privilege Escalation Author : Ajay Gowtham aka AJOXR Tested on : Windows 10 Latest version x64 bit Software :...

CVE-2016-9192

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected...

ForeScout CounterACT Insecure File Creation Vulnerability (CNVD-2016-12429)

ForeScout CounterACT is a network access control product. A security vulnerability exists in ForeScout CounterACT that originates when the program creates files in an insecure manner. An attacker could exploit the vulnerability to gain SYSTEM privileges...

ForeScout CounterACT Insecure File Creation Vulnerability

ForeScout CounterACT is a network access control product. A security vulnerability exists in ForeScout CounterACT that originates when the program creates files in an insecure manner. An attacker could exploit the vulnerability to gain SYSTEM privileges...

Microsoft Windows Installer Elevation of Privilege (MS16-149: CVE-2016-7292)

An elevation of privilege vulnerability exists in the Windows Installer. The vulnerability is due to the Windows Installer failing to properly sanitize input leading to an insecure library loading behavior. A attacker could run arbitrary code with elevated system privileges...

Cisco AnyConnect Secure Mobility Client Local Elevation of Privilege Vulnerability

Cisco AnyConnect Secure Mobility Client is a secure mobility client from Cisco that provides secure access to networks and applications from any device. A local elevation of privilege vulnerability exists in Cisco AnyConnect Secure Mobility Client. A local attacker could use this vulnerability to...

CVE-2016-9796

Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be queried using the GIOP protocol on TCP port 30024. An attacker can bypass authentication, and OmniVista invokes methods AddJobSet, AddJob, and ExecuteNow that can be used to run arbitrary commands on the...

Apple iCloud Setup Remote Code Execution Vulnerability

Apple iCloud is a cloud service from Apple USA that supports storage of music, photos, apps, contacts, etc. iCloud Setup is one of the installation components. A remote code execution vulnerability exists in Apple iCloud Setup version 6.0. An attacker can exploit this vulnerability to execute...

Local Elevation of Privilege Vulnerability in Multiple Symantec Products

Symantec Norton Security with Backup, etc. are all security series software from Symantec USA. A local elevation of privilege vulnerability exists in multiple Symantec products. A local attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges...

Huawei UTPS - Unquoted Service Path Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Unquoted Service Path Vulnerability in Huawei UTPS Software Date: Nov 16 2016 Author: Dhruv Shah @Snypter Website: http://security-geek.in Contact: email protected Category: local Vendor Homepage: http://www.huawei.com/ Versio...

Panda Global Protection <= 16.1.2 Privilege Escalation Vulnerability

Panda Global Protection is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mozilla Firefox elevation of privilege vulnerability (CNVD-2016-11412)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A privilege extraction vulnerability exists in the Mozilla Maintenance Service in versions of Mozilla Firefox prior to 50 on Windows-based platforms. An attacker can exploit this vulnerability ...

Intel Identity Protection Technology Host Interface Service 1.2.22.0 Privilege Escalation Vulnerabil

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ============= www.intel.com Product: ======== Intel Identity Protection Technology Host Interface Service jhiservice.exe v1.2.22.0 Vulnerability Type: =================== Privilege Escalation Unquot...

Intel Management And Security LMS.exe 7.1.13.1088 Privilege Escalation Vulnerability

Intel Management and Security Application Local Management Service LMS.exe version 7.1.13.1088 suffers from a privilege escalation vulnerability. + Credits: John Page aka hyp3rlinx Vendor: ============= www.intel.com Product: =========== Intel Management and Security Application Local Management...