Apple OS X Bluetooth HCI Memory Corruption Vulnerability

Apple OS X is an operating system developed by Apple Inc. A memory corruption vulnerability exists in the Apple OS X Bluetooth HCI interface, which allows attackers to exploit the vulnerability to execute arbitrary code with system privileges...

Apple OS X union mounts arbitrary code execution vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X suffers from a security vulnerability in the handling of union mounts, which allows an attacker to exploit the vulnerability to execute arbitrary code with system privileges...

Apple iOS Access Control Arbitrary Code Execution Vulnerability

Apple iOS is an operating system developed by Apple for use in cell phones and other devices. A security vulnerability in the Apple iOS access control handling allows an attacker to exploit the vulnerability to execute arbitrary code with system privileges...

Apple OS X OKit Null Pointer Reference Arbitrary Code Execution Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X handles OKit with a null pointer reference vulnerability that allows an attacker to execute arbitrary code with system privileges...

Apple iOS Mobile Replayer Arbitrary Code Execution Vulnerability

Apple iOS is an operating system developed by Apple for use in cell phones and other devices. A path-checking vulnerability exists in the Apple iOS Mobile Replayer handling, which could be exploited by an attacker to execute arbitrary code with system privileges...

Lenovo Solution Center LSCTaskService privilege escalation, directory traversal, and CSRF

Overview The Lenovo Solution Center application contains multiple vulnerabilities that can allow an attacker to execute arbitrary code with SYSTEM privileges. Description CWE-732: Incorrect Permission Assignment for Critical Resource Launching the Lenovo Solution Center creates a process called...

Tibbo Technology AggreGate Elevation of Privilege Vulnerability

Tibbo Technology AggreGate is Tibbo Technology's integrated IoT platform for controlling, configuring, monitoring and servicing different electronic devices through advanced networking technologies. A security vulnerability exists in the agserverservice.exe file in the AggreGate Server Service of...

CVE-2015-7913

agserverservice.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class...

Design/Logic Flaw

agserverservice.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class...

CVE-2015-7913

agserverservice.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class...

Code injection

The administration-panel web service in IBM System Networking Switch Center SNSC before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file...

ManageEngine Applications Manager CommonAPIUtil enableDisableAlarmsAction SQL Injection

An SQL injection vulnerability exists in ManageEngine Applications Manager. This vulnerability is due to insufficient validation of the resourceid and haid parameters when processing requests using the enableDisableAlarmsAction method of the CommonAPIUtil class. By sending crafted request message...

Android intents can be used on Firefox for Android to open privileged files — Mozilla

Security researcher Muneaki Nishimura reported that on Firefox for Android, a search engine can be registered and used to launch Firefox through an Android intent. When Firefox for Android is launched, the URL can executed with Firefox's system privileges if the crash reporter is used. This allow...

ManageEngine Applications Manager CommonAPIUtil moveSubGroup haid tohaid SQL Injection

An SQL injection vulnerability exists in ManageEngine Applications Manager. This vulnerability is due to insufficient validation of the haid and tohaid parameters when processing requests using the moveSubGroup method of the CommonAPIUtil class. By sending crafted request messages, a remote...

EPSON Network Utility installs EpsonBidirectionalService with insecure permissions

Overview EPSON Network Utility contains a local privilege escalation vulnerability, which allows a local attacker to execute arbitrary code with SYSTEM privileges. Description CWE-276: Incorrect Default Permissions - CVE-2015-6034EPSON Network Utility v4.10 is an application that checks the print...

ManageEngine Desktop Central Tools Execution Status Update RCE (intrusive check)

The version of ManageEngine Desktop Central running on the remote host is affected by an unspecified remote code execution vulnerability in the system tools execution status updates due to a failure to properly sanitize user-supplied input. A remote, unauthenticated attacker can exploit this to...

HP Client Automation and Radia Client Automation is vulnerable to remote code execution

Overview Radia Client Automation previously sold under the name HP Client Automation agent prior to version 9.1 is vulnerable to arbitrary remote code execution. Description According to ZDI's advisory for ZDI-15-363, which has been assigned CVE-2015-7860: "This vulnerability allows remote...

ManageEngine Applications Manager CommonAPIUtil removeMonitorFrmMG haid SQL Injection

An SQL injection vulnerability exists in ManageEngine Applications Manager. This vulnerability is due to insufficient validation of the haid parameter when processing requests using the removeMonitorFrmMG method of the CommonAPIUtil class. By sending crafted request messages, a remote...

Cisco AnyConnect elevation of privileges via DLL side loading

------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges via DLL side loading ------------------------------------------------------------------------ Yorick Koster, June 2015...

Oracle Endeca IDI ETL Server DownloadFileContent Directory Traversal (CVE-2015-4745)

A directory traversal vulnerability exists in Oracle Endeca Information Discovery Integrator ETL Server. The vulnerability is due to insufficient input validation while processing SOAP requests to the DownloadFileConent operation. A remote authenticated attacker can leverage this vulnerability to...