Microsoft Windows 8.1 (x86x64) - User Profile Service Privilege Escalation (MS15-003)

Microsoft Windows 8.1 x86x64 - User Profile Service Privilege Escalation MS15-003 Source: https://code.google.com/p/google-security-research/issues/detail?id=123 Platform: Windows 8.1 Update 32/64 bit No other OS tested When a user logs into a computer the User Profile Service is used to create...

Windows 8.1 (32/64 bit) - Privilege Escalation (User Profile Service) (MS15-003)

Exploit for windows platform in category local exploits Source: https://code.google.com/p/google-security-research/issues/detail?id=123 Platform: Windows 8.1 Update 32/64 bit No other OS tested When a user logs into a computer the User Profile Service is used to create certain directories and mou...

Microsoft Windows Server Local Elevation of Privilege Vulnerability

Microsoft Windows is a family of operating systems from Microsoft. A vulnerability exists in Microsoft Windows User Profile Service ProfSvc checksum user privileges, which can be exploited by an authenticated attacker to load registry configuration units associated with other accounts, which can...

Google re-aeration Windows8. 1 vulnerability, Microsoft anger-vulnerability warning-the black bar safety net

At Microsoft yet had released vulnerability patches, the Google Project Zero team has once again released its Windows8. 1 System and a new vulnerability, the vulnerability can lead to elevation of privileges. Google a series of vulnerability disclosures angered Microsoft. Google reject extension...

Microsoft Windows User Profile Service Privilege Escalation (3021674)

This host is missing an important security update according to Microsoft Bulletin MS15-003. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Discloses Another Unpatched Windows 8.1 Vulnerability

Google has once again released the details of a new privilege escalation bug in Microsoft's Windows 8.1 operating system before Microsoft planned to patch the bug, triggering a new quarrel between the two tech giants. This is second time in less than a month when the Google’s security research te...

CVE-2015-0004

The User Profile Service aka ProfSvc in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction atta...

Privilege escalation

The User Profile Service aka ProfSvc in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction atta...

CVE-2015-0004

The User Profile Service aka ProfSvc in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction atta...

MS15-003: Vulnerability in Windows User Profile Service Could Allow Elevation of Privilege (3021674)

The remote Windows host is affected by a privilege escalation vulnerability due to improper validation of user privilege in the Windows User Profile Service ProfSvc. A local attacker, with a specially crafted application, can load registry hives associated with other user accounts to execute...

MS15-003: Vulnerability in Windows User Profile service could allow elevation of privilege: January 13, 2015

None None...

Elefant CMS v1.3.9 - Persistent Name Update Vulnerability

Document Title: =============== Elefant CMS v1.3.9 - Persistent Name Update Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1365 Release Date: ============= 2014-12-03 Vulnerability Laboratory ID VL-ID: ====================================...

Elefant CMS 1.3.9 Cross Site Scripting

Document Title: =============== Elefant CMS v1.3.9 - Persistent Name Update Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1365 Release Date: ============= 2014-12-03 Vulnerability Laboratory ID VL-ID: ====================================...

Elefant CMS v1.3.9 - Persistent Name Update Vulnerability

Document Title: =============== Elefant CMS v1.3.9 - Persistent Name Update Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1365 Release Date: ============= 2014-12-03 Vulnerability Laboratory ID VL-ID: ====================================...

MyBB Forums 1.8.2 - Persistent Cross-Site Scripting

MyBB Forums 1.8.2 - Persistent Cross-Site Scripting Exploit Title:Stored XSS vulnerability in MyBB 1.8.2 Date: 16th November'2014 Exploit Author: Avinash Kumar Thapa Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/download/ Version: MyBB 1.8.2 latest Tested on: Operating...

Activity stream on JAC contains updates from another user

Jira prompted me to change my time zone, and brought me to a profile that seems to be for a completely different user who happens to share my first name and last initial. See attached screen shot. Going directly to https://secretlocation.atlassian.net/secure/ViewProfile.jspa shows me the proper...

Activity stream on JAC contains updates from another user

Jira prompted me to change my time zone, and brought me to a profile that seems to be for a completely different user who happens to share my first name and last initial. See attached screen shot. Going directly to https://secretlocation.atlassian.net/secure/ViewProfile.jspa shows me the proper...

Activity stream on JAC contains updates from another user

Jira prompted me to change my time zone, and brought me to a profile that seems to be for a completely different user who happens to share my first name and last initial. See attached screen shot. Going directly to https://secretlocation.atlassian.net/secure/ViewProfile.jspa shows me the proper...

vBulletin 5.1.X - Persistent Cross Site Scripting

No description provided by source. Title: vBulletin 5.1.X - Cross Site Scripting Date: 05.09.14 Version: = 5.1.2 Latest ATM Vendor: vbulletin.com Contact: smash at devilteam.pl 1 Agenda Latest vBulletin forum software suffers on persistent cross site scripting vulnerability, which most likely can...

MyBB User Social Networks Plugin 1.2 - Stored XSS

No description provided by source. Exploit Title: User Social Networks MyBB Plugin 1.2 - Cross Site Scripting Google Dork: N/A Date: 05.09.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor Homepage - N/A Software Link: http://mods.mybb.com/view/user-social-networks...