Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

Cisco WebEx Meetings are web conferencing solutions. A command injection vulnerability exists in the Cisco Webex Meetings Desktop App Update Service due to insufficient validation of user-supplied parameters. An attacker exploiting this vulnerability could invoke the update service command by usi...

CVE-2018-15442

A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this...

CVE-2018-15442

CVE-2018-15442 concerns Cisco Webex Meetings Desktop App on Windows. The issue is a command-injection in the Update Service (WebExService) caused by insufficient validation of user-supplied parameters. An authenticated, local attacker could invoke the update command with a crafted argument and ex...

Design/Logic Flaw

A vulnerability was discovered in all versions of Medtronic MyCareLink 24950 and 24952 Patient Monitor. The affected product's update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable...

CVE-2018-10626

Medtronic MyCareLink Patient Monitor’s update service does not sufficiently verify the authenticity of the data uploaded. An attacker who obtains per-product credentials from the monitor and paired implantable cardiac device information can potentially upload invalid data to the Medtronic CareLin...

(RHSA-2018:2114) Low: Red Hat Enterprise Linux 6.6 TUS Six-Month Notice

In accordance with the Red Hat Enterprise Linux Errata Support Policy, Telecommunications Update Service for Red Hat Enterprise Linux 6.6 will be retired as of December 31, 2018, and active support will no longer be provided. Accordingly, Red Hat will no longer provide updated packages, including...

CVE-2018-9859

The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's available to create an executable file with System privilege by other vulnerable applications...

CVE-2018-9859

The CVE-2018-9859 issue affects NAVER Whale prior to version 1.0.40.7, where the Whale update service path is unquoted. Root cause: an unquoted update service path can be leveraged to run executables with System privileges by other vulnerable apps, enabling persistent privilege escalation. Impact...

Microsoft Windows: Specify intranet Microsoft update service location

Check Setting OpenVAS Vulnerability Test $Id: winusewuserver.nasl 11535 2018-09-21 19:39:46Z cfischer $ Check value for Specify intranet Microsoft update service location Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Set the intranet update service for detecting updates

Check Setting OpenVAS Vulnerability Test $Id: winusewuserverpath.nasl 11535 2018-09-21 19:39:46Z cfischer $ Check value for Set the intranet update service for detecting updates Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...

Samsung SW Update Service Privilege Escalation Vulnerability

Samsung Software Update Service, SWUpdateService SWMAgent.exe, installs as a service with an unquoted service path running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. Exploit...

Samsung SW Update Service Privilege Escalation

Exploit Title: Samsung SW Update Service Unquoted Service Path Privilege Escalation Date: 04/10/2016 Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH && Superbug @xsuperbug Website: http://yildirimyunus.com Contact: [email protected] Category: local Vendor Homepage:...

Foxit Cloud Update Service - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Foxit Cloud Update Service: https://www.foxitsoftware.com By Ross Marks: http://www.rossmarks.co.uk Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Foxit reader's "cloud safe update service" install...

Foxit Cloud Update Service - Unquoted Service Path Privilege Escalation

Foxit Cloud Update Service - Unquoted Service Path Privilege Escalation Foxit Cloud Update Service: https://www.foxitsoftware.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path...

CVE-2015-8843

The Foxit Cloud Update Service FoxitCloudUpdateService in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption...

Memory corruption

The Foxit Cloud Update Service FoxitCloudUpdateService in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption...

CVE-2015-8843

The Foxit Cloud Update Service FoxitCloudUpdateService in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges by writing crafted data to a shared memory region, which triggers memory corruption...

Cisco Wireless Residential Gateway Information Disclosure Vulnerability

A vulnerability in the web-based administration interface of the Cisco Wireless Residential Gateway could allow an unauthenticated, remote attacker to access sensitive information on the affected device. The vulnerability is caused by improper access restrictions implemented on the affected...

Lenovo System Update elevation of privilege vulnerability (CNVD-2015-07329)

Lenovo System Update aka ThinkVantage System Update is a system update software from Lenovo. The service component of Lenovo System Update, SUService.exe, creates a named pipe to provide system update services to low-privileged processes. A security vulnerability exists in the Lenovo System Updat...

Mystery Windows 7 Update An Accidental Test Update

A suspicious Windows 7 update today raised concern on a number of Microsoft and technology forums that the Windows Update service had been compromised. Microsoft, however, cleared the air several hours later admitting that the update was their mistake. “We incorrectly published a test update and...