CVE-2016-3943

Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which allows local users to gain SYSTEM privileges by modifying an executable module...

Sysax Multi Server 6.50 SEH Overflow

Exploit Title: Sysax Multi Server 6.50 HTTP File Share SEH Overflow RCE Exploit Date: 03/21/2016 Exploit Author: Paul Purcell Contact: ptpxploit at gmail Vendor Homepage: http://www.sysax.com/ Vulnerable Version Download: http://download.cnet.com/Sysax-Multi-Server/3000-21604-76171493.html 6.50 a...

Microsoft Windows CVE-2016-0087 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with SYSTEM privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft...

QNAP Systems iArtist Lite Command Execution Vulnerability

QNAP Systems iArtist Lite is a suite of ad editing software for QNAP NAS. A security vulnerability exists in QNAP Systems iArtist Lite that allows remote attackers to execute arbitrary binary commands with SYSTEM privileges...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2016-01275)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack that originates from t...

IBM Tivoli Storage Manager FastBack stack buffer overflow vulnerability (CNVD-2016-01274)

IBM Tivoli Storage Manager FastBack is a suite of software from IBM USA that provides continuous data protection and recovery management capabilities for Microsoft Windows and Linux servers. A stack buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack that originates from t...

File Replication Pro 7.2.0 - Multiple Vulnerabilities

Exploit for jsp platform in category remote exploits Title: File Replication Pro Remote Command Execution Vendor: File Replication Pro Vendor URL: http://www.filereplicationpro.com/ Versions affected: = Permalink: Summary: -------- File Replication Pro FRP is a file management solution that is us...

Netgear Management System NMS300 contains arbitrary file upload and path traversal vulnerabilities

Overview Netgear Management System NMS300, version 1.5.0.11 and earlier, is vulnerable to arbitrary file upload, which may be leveraged by unauthenticated users to execute arbitrary code with SYSTEM privileges. A directory traversal vulnerability enables authenticated users to download arbitrary...

Manage Engine Application Manager 12.5 - Arbitrary Command Execution

Manage Engine Application Manager 12.5 - Arbitrary Command Execution !C:/Python27/python.exe -u Applications Manager 12.5 Arbitrary Command Execution Exploit Vendor: Zoho Corporation Pvt. Ltd. Product web page: https://www.manageengine.com Affected version: 12.5 Summary: ManageEngine Applications...

Apple OS X Intel Graphics Driver Memory Out-of-Bounds Access Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles a memory out-of-bounds access vulnerability in Intel Graphics Driver, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Apple OS X Intel Graphics Driver Memory Corruption Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles a memory corruption vulnerability in Intel Graphics Driver, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Apple OS X IOAcceleratorFamily Memory Corruption Arbitrary Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles a memory corruption vulnerability in IOAcceleratorFamily, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Apple OS X VM Object Memory Misreference Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X suffers from a memory misreference vulnerability in the handling of VM objects, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Apple iOS trust cache loading arbitrary code execution vulnerability

Apple iOS is an operating system developed by Apple for use in cell phones and other devices. A security vulnerability in Apple iOS trust cache loading allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Apple OS X IOHIDFamily Memory Corruption Arbitrary Code Execution Vulnerability (CNVD-2015-08133)

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles a memory corruption vulnerability in IOHIDFamily, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Apple OS X IOHIDFamily Memory Corruption Arbitrary Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles a memory corruption vulnerability in IOHIDFamily, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Apple iOS dyld Arbitrary Code Execution Vulnerability

Apple iOS is an operating system developed by Apple for use in cell phones and other devices. An arbitrary code execution vulnerability exists in Apple iOS dyld processing, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Apple iOS dyld arbitrary code execution vulnerability (CNVD-2015-08185)

Apple iOS is an operating system developed by Apple for use in cell phones and more. A segment checksum vulnerability exists in the Apple iOS dyld handling, which allows an attacker to exploit the vulnerability to execute arbitrary code with system privileges...

Apple iOS Mobile Replayer Arbitrary Code Execution Vulnerability (CNVD-2015-08187)

Apple iOS is an operating system developed by Apple for use in cell phones and other devices. A path-checking vulnerability exists in the Apple iOS Mobile Replayer handling, which could be exploited by an attacker to execute arbitrary code with system privileges...

Apple OS X kernel loader path validation vulnerability

Apple OS X is an operating system developed by Apple Inc. A security vulnerability in Apple OS X's handling of kernel loader path checksums allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...