Dolby Audio X2 elevation of privilege vulnerability in multiple Lenovo products

An elevation of privilege vulnerability exists in multiple Lenovo products Dolby Audio X2. A local attacker can exploit the vulnerability to run files with system privileges...

ZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote SYSTEM Code Execution

i? ZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote SYSTEM Code Execution Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.0.1.0R230 Platform: 3.0.1.0R230 Personnel: 1.0.1.0R1916 Access: 6.0.1.0R1757...

BlueStacks Local Elevation of Privilege Vulnerability

BlueStacks is an Android emulator from the Chinese company BlueStacks. A local boost vulnerability exists in BlueStacks version 2.1.3.5650. A local attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges...

BlueStacks App Player Privilege Escalation Vulnerability

Talos Vulnerability Report TALOS-2016-0124 BlueStacks App Player Privilege Escalation Vulnerability August 4, 2016 CVE Number CVE-2016-4288 Description A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates a registry key with weak...

TG Soft VirIT eXplorer 'viritsvclite' Service Local Lift Vulnerability

TG Soft VirIT eXplorer is a suite of antivirus software from the Italian company TG Soft. A security vulnerability exists in TG Soft VirIT eXplorer that could be exploited by a local attacker to execute arbitrary code with SYSTEM privileges...

CVE-2016-5821

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

Hardcoded credentials

Huawei HiSuite before 4.0.4.204ove Out of China and before 4.0.4.301 China use a weak ACL FILEWRITEDATA for BUILTIN\Users for the HiSuite service directory, which allows local users to gain SYSTEM privileges via a Trojan horse 1 SspiCli.dll or 2 USERENV.dll file or possibly other unspecified DLL...

Windows Print Spooler Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs...

Symantec CIDS Driver PE File Memory Corruption Vulnerability

Symantec Client Intrusion Detection System is a client-side intrusion detection system. A memory corruption vulnerability exists in the Symantec Client Intrusion Detection System CIDS driver in the CIDS engine driver when processing constructed PE files. This could result in malicious code being...

PaKnPost Pro 1.14 - Multiple Vulnerabilities

Exploit Title: PaKnPost Pro Arbitrary File Upload & Remote Code Execution Date: 2016-07-06 Product: PaKnPost Pro Vendor Homepage: http://www.paknpost.org Software Link: https://sourceforge.net/projects/paknpost/ Version: =1.14 Tested on: Windows, Linux Exploit Authors: Edvin Rustemagic, Grega...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges, as well as bypass the “closed environment” protection mechanism.

The dbcwnt.exe module contains a vulnerable function address 0x4017d4, which reads the value of the NETMBX environment variable into a buffer in the stack, without controlling the size of the copied data. This vulnerability allows a local attacker to execute arbitrary code. Additionally, this...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub40E0B6” at address “0x0040E10B”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x16 “0x0040CF5C”. This vulnerability allows a malicious attacker to execute arbitrary code with...

The vulnerability of the Linux operating system, which allows a malicious individual to increase their privileges

Local users with the CAPSYSADMIN privilege can elevate their privileges by using the XFS file system...

The vulnerability of the automated system for managing technological processes of SIMATIC WinCC allows a malicious individual to increase their privileges level.

Access rights to system objects allow a local user to obtain limited, enhanced privileges as a user of the operating system...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

This vulnerability allows both remote and local attackers to execute arbitrary code with system privileges, without the need for authentication. This is achieved by sending an incorrect OPEN command to the InterBase database...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the “sub41149F” authentication process at the address “0x0041150E”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x13 “0x0040C95C”. This vulnerability allows a malicious attacker to execute...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub0040F059” at address “0x0040F092”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x15 “0x0040CD91”. This vulnerability allows a malicious attacker to execute arbitrary code wi...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges or to disrupt the operation of the program.

In the procedure “sub410855” for addresses “0x00410C32”, “0x00410D0C”, “0x00410D4B”, “0x00410DCF”, “0x00410EB1”, “0x00410F98”, “0x00410FEC”, “0x00411141”, there is no verification of the correctness of the input data. This may lead to buffer overflows during the processing of RPC calls with numbe...

The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges.

In the procedure “sub40FBE6” at address “0x0040FC0A”, there is no check for the correctness of input data. This may lead to buffer overflows in the stack during the processing of the RPC call numbered 0x1A “0x0040DB0F”. This vulnerability allows a malicious attacker to execute arbitrary code with...

XpoLog Center 6 - Remote Command Execution Cross-Site Request Forgery

XpoLog Center 6 - Remote Command Execution Cross-Site Request Forgery XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management...