2209 matches found
Moodle < 2.6 / 2.6.x < 2.6.9 / 2.7.x < 2.7.6 / 2.8.x < 2.8.4 Multiple Vulnerabilities
Binary data 8726.prm...
Slack Discloses Breach of its User Profile Database
Enterprise and small business collaboration provider Slack today disclosed that a database storing user profile information has been compromised. The company said in a notice posted on its site that the unauthorized access has been blocked, and that it has implemented two-factor authentication...
精讯cms sql注入(直接提升为管理员)
简要描述： 用户量挺大的一个cms 详细说明： 看到Lib\Action\MemberAction.class.php public function profile $this - obj - isLogin or $this - showMsgL'LOGINFIRST', Url :: getUrl'member', 'login'; if $this - isSubmit if $this - obj - edit $this - showMsgL'OPERATESUCCESS', $this - referer; else $this - showMsg$this - obj -...
Pragyan CMS 3.0 - SQL Injection
Advisory: SQL injection vulnerability in Pragyan CMS v.3.0 Advisory ID: SROEADV-2015-11 Author: Steffen Rösemann Affected Software: Pragyan CMS v.3 Vendor URL: https://github.com/delta/pragyan, http://delta.nitt.edu/ Vendor Status: vendor did not respond after initial communication CVE-ID: -...
Pragyan CMS 3.0 SQL Injection Vulnerability
Pragyan CMS version 3.0 suffers from a remote SQL injection vulnerability. Advisory: SQL injection vulnerability in Pragyan CMS v.3.0 Author: Steffen Rösemann Affected Software: Pragyan CMS v.3 Vendor URL: https://github.com/delta/pragyan, http://delta.nitt.edu/ Vendor Status: vendor did not...
Pragyan CMS 3.0 - SQL Injection
Pragyan CMS 3.0 - SQL Injection Advisory: SQL injection vulnerability in Pragyan CMS v.3.0 Advisory ID: SROEADV-2015-11 Author: Steffen Rösemann Affected Software: Pragyan CMS v.3 Vendor URL: https://github.com/delta/pragyan, http://delta.nitt.edu/ Vendor Status: vendor did not respond after...
Microsoft Windows User Profile Service Elevation of Privilege Vulnerability
Microsoft Windows is a windowed operating system developed by Microsoft Corporation in the United States. An elevation of privilege vulnerability exists in the Microsoft Windows User Profile Service service when verifying user privileges, which could be exploited by an attacker to cause the User...
Microsoft Windows multiple security vulnerabilities
Application Compatibility Cache privilege escalation, telnet service buffer overflow, User Profile Service privilege escalation, TS WebProxy directory traversal, Network Location Awareness Service restrictions bypass, Windows Error Reporting restrictions bypass, WebDAV driver privilege escalation...
Microsoft Windows < 8.1 (x86/x64) - User Profile Service Privilege Escalation (MS15-003)
Source: https://code.google.com/p/google-security-research/issues/detail?id=123 Platform: Windows 8.1 Update 32/64 bit No other OS tested When a user logs into a computer the User Profile Service is used to create certain directories and mount the user hives as a normal user account cannot do so...
Microsoft Windows 8.1 (x86x64) - User Profile Service Privilege Escalation (MS15-003)
Microsoft Windows 8.1 x86x64 - User Profile Service Privilege Escalation MS15-003 Source: https://code.google.com/p/google-security-research/issues/detail?id=123 Platform: Windows 8.1 Update 32/64 bit No other OS tested When a user logs into a computer the User Profile Service is used to create...
Windows 8.1 (32/64 bit) - Privilege Escalation (User Profile Service) (MS15-003)
Exploit for windows platform in category local exploits Source: https://code.google.com/p/google-security-research/issues/detail?id=123 Platform: Windows 8.1 Update 32/64 bit No other OS tested When a user logs into a computer the User Profile Service is used to create certain directories and mou...
Microsoft Windows Server Local Elevation of Privilege Vulnerability
Microsoft Windows is a family of operating systems from Microsoft. A vulnerability exists in Microsoft Windows User Profile Service ProfSvc checksum user privileges, which can be exploited by an authenticated attacker to load registry configuration units associated with other accounts, which can...
Google re-aeration Windows8. 1 vulnerability, Microsoft anger-vulnerability warning-the black bar safety net
At Microsoft yet had released vulnerability patches, the Google Project Zero team has once again released its Windows8. 1 System and a new vulnerability, the vulnerability can lead to elevation of privileges. Google a series of vulnerability disclosures angered Microsoft. Google reject extension...
Microsoft Windows User Profile Service Privilege Escalation (3021674)
This host is missing an important security update according to Microsoft Bulletin MS15-003. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Google Discloses Another Unpatched Windows 8.1 Vulnerability
Google has once again released the details of a new privilege escalation bug in Microsoft's Windows 8.1 operating system before Microsoft planned to patch the bug, triggering a new quarrel between the two tech giants. This is second time in less than a month when the Google’s security research te...
CVE-2015-0004
The User Profile Service aka ProfSvc in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction atta...
Privilege escalation
The User Profile Service aka ProfSvc in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction atta...
CVE-2015-0004
The User Profile Service aka ProfSvc in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction atta...
MS15-003: Vulnerability in Windows User Profile Service Could Allow Elevation of Privilege (3021674)
The remote Windows host is affected by a privilege escalation vulnerability due to improper validation of user privilege in the Windows User Profile Service ProfSvc. A local attacker, with a specially crafted application, can load registry hives associated with other user accounts to execute...
