6277 matches found
Linux Kernel libfutex Local Root for RHEL/CentOS 7.0.1406 Exploit
Exploit for linux platform in category local exploits / CVE-2014-3153 exploit for RHEL/CentOS 7.0.1406 By Kaiqu Chen email protected Based on libfutex and the expoilt for Android by GeoHot. Usage: $gcc exploit.c -o exploit -lpthread $./exploit / include include include include include include...
KLA10601 Multiple vulnerabilities in Microsoft products
Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...
Information disclosure
The SomTodo - Task/To-do widget aka com.somcloud.somtodo application 2.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7049
The CVE-2014-7049 entry concerns the SomTodo (com.somcloud.somtodo) Android app version 2.0.3, which does not verify X.509 certificates from SSL servers. This trust weakness allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability a...
Microsoft Unveils Windows 10 — The Next Version Of Windows Operating system
While the whole world was waiting for the next generation of Windows operating system, i.e. Windows 9, but skipping right over 9, Microsoft has announced the next version of its Windows is Windows 10, disclosing its first details on Tuesday at an event in San Francisco. The latest version of...
[SECURITY] Fedora 20 Update: kdeadmin-4.14.1-1.fc20
The kdeadmin metapackage includes administrative tools including: kcron: systemsettings module for the cron task scheduler ksystemlog: system log viewer kuser: user manager...
5pmweb.com Cross Site Scripting
author: provensec description: Easy, Customizable Project Management SAS vendor: 5pmweb.com exploit 1 Goto site. 5pmweb.com/index.php 2 Add new task fill description and name field with xss payload " and then click on the task as given in the screenshot http://prntscr.com/4pxe6j 3 Javascript will...
Microsoft Windows multiple security vulnerabilities
Windows Media Center use-after-free, drivers privilege escalation, .Net restriction bypass and DoS, LRPC restriction bypass, Windows Installer service privilege escalation, Internet Explorer multiple security vulnerabilities, Task Scheduler privilege escalation...
CVE-2014-4074
The Task Scheduler in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via an application that schedules a crafted task, aka "Task Scheduler Vulnerability."...
Security feature bypass
The Task Scheduler in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via an application that schedules a crafted task, aka "Task Scheduler Vulnerability."...
CVE-2014-4074
CVE-2014-4074 concerns a privilege-escalation flaw in Windows Task Scheduler. The vulnerability exists in Task Scheduler across Windows 8/8.1, Windows Server 2012 (Gold/R2) and Windows RT/8.1, where a crafted task can be scheduled to abuse privileges. The issue is triggered locally by scheduling ...
CVE-2014-4074
The Task Scheduler in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via an application that schedules a crafted task, aka "Task Scheduler Vulnerability."...
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability (2988948)
This host is missing an important security update according to Microsoft Bulletin MS14-054. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS14-054: Vulnerability in Windows Task Scheduler Could Allow Elevation of Privilege (2988948)
The remote Windows host is affected by a privilege escalation vulnerability. The vulnerability is due to improperly conducted integrity checks on tasks by Windows Task Scheduler. An authenticated attacker can exploit this vulnerability to execute arbitrary code in the context of the local system...
September 2014 Microsoft Patch Tuesday security bulletins
The Operation SnowMan espionage campaign, which targeted military intelligence earlier this year via an Internet Explorer zero day, exposed a weak spot in Microsoft’s vulnerability management efforts. What was unique about the SnowMan operation is that it included a check as to whether the...
Microsoft Windows Task Scheduler Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary code with the Local system account. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Microsoft...
MS14-054: Vulnerability in Windows Task Scheduler could allow elevation of privilege: September 9, 2014
None None...
IBM WebSphere Portal 8.0.0.x Unified Task List Portlet Multiple Vulnerabilities (PI18909)
The version of IBM WebSphere Portal on the remote host is affected by multiple vulnerabilities in the Unified Task List UTL portlet : - An unspecified open redirect vulnerability exists that allows a remote attacker to perform a phishing attack by enticing a user to click a malicious URL...
ESA-2014-059: EMC Documentum Multiple Cross-Site Scripting Vulnerabilities
ESA-2014-059.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-059: EMC Documentum Multiple Cross-Site Scripting Vulnerabilities EMC Identifier: ESA-2014-059 CVE Identifier: CVE-2014-2511 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected products: • EMC WebTop...
CVE-2014-3070
The addFileRegistryAccount Virtual Member Manager VMM SPI Admin Task in IBM WebSphere Application Server WAS 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly create accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors...