5631 matches found
XpoLog Center 6 - Remote Command Execution / Cross-Site Request Forgery
XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management Platform. Desc: XpoLog suffers from arbitrary command execution. Attackers...
XpoLog Center 6 Cross Site Request Forgery
XpoLog Center V6 CSRF Remote Command Execution Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management Platform. Desc: XpoLog suffers from arbitrary command execution. Attackers...
Panda Security PSEvents Privilege Escalation
PSEvents.exe within several Panda Security products runs hourly with SYSTEM privileges. When run, it checks a user writable folder for certain DLL files, and if any are found they are automatically run. Vulnerable Products: Panda Global Protection 2016 use exploit/windows/local/panda/psevents msf...
AdobeUpdateService 3.6.0.248 Privilege Escalation
---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://www.adobe.com/fr/...
AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation
AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation ---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploi...
AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation
---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://www.adobe.com/fr/...
Windows Diagnostics Hub Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system...
CVE-2016-2855
The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll...
CVE-2016-2855
The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll...
Apple OS X El Capitan Multi-Touch Arbitrary Code Execution Vulnerability
Apple OS X El Capitan is an operating system on Apple devices. A security vulnerability in Apple OS X El Multi-Touch allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...
Apple OS X El Capitan Audio Arbitrary Code Execution Vulnerability
Apple OS X El Capitan is an operating system on Apple devices. A security vulnerability in Audio in Apple OS X El Capitan allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...
IBM Domino Authentication Bypass Vulnerability
IBM Domino is a suite of platforms for hosting social business applications from IBM in the United States. An unspecified security vulnerability exists in IBM Domino, which allows remote attackers to bypass the authentication process and execute arbitrary code with system privileges...
About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003
About the security content of OS X El Capitan v10.11.5 and Security Update 2016-003 This document describes the security content of OS X El Capitan v10.11.5 and Security Update 2016-003. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full...
Threat Actor Leverages Windows Zero-day Exploit in Payment Card Data Attacks
In March 2016, a financially motivated threat actor launched several tailored spear phishing campaigns primarily targeting the retail, restaurant, and hospitality industries. The emails contained variations of Microsoft Word documents with embedded macros that, when enabled, downloaded and execut...
Threat Actor Leverages Windows Zero-day Exploit in Payment Card Data Attacks
In March 2016, a financially motivated threat actor launched several tailored spear phishing campaigns primarily targeting the retail, restaurant, and hospitality industries. The emails contained variations of Microsoft Word documents with embedded macros that, when enabled, downloaded and execut...
Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-02848)
Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A privilege escalation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker with the help of a...
Android Mediaserver Privilege Vulnerability
Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A privilege escalation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker with the help of a...
Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-02847)
Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A privilege escalation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker with the help of a...
Design/Logic Flaw
Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which allows local users to gain SYSTEM privileges by modifying PandaURLFilteringb.exe...
CVE-2015-7378
Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which allows local users to gain SYSTEM privileges by modifying PandaURLFilteringb.exe...