Privilege escalation

Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator read-only account could escalate privileges to admi...

Privilege escalation

Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator read-only account could escalate privileges to admin...

CVE-2017-0935

Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator read-only account could escalate privileges to admi...

AMD Acknowledges Newly Disclosed Flaws In Its Processors — Patches Coming Soon

AMD has finally acknowledged 13 critical vulnerabilities, and exploitable backdoors in its Ryzen and EPYC processors disclosed earlier this month by Israel-based CTS Labs and promised to roll out firmware patches for millions of affected devices 'in the coming weeks.' According to CTS-Labs...

Authentication flaw

Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass with the attacker obtaining admin access via '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenticationenabled PUT request...

CVE-2018-8096

CVE-2018-8096 affects Datalust Seq versions before 4.2.605. The vulnerability is an authentication bypass exploitable via a PUT request to api/settings/setting-isauthenticationenabled with "Name":"isauthenticationenabled","Value":false, potentially granting admin access. Multiple connected source...

CVE-2018-8096

Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass with the attacker obtaining admin access via '"Name":"isauthenticationenabled","Value":false' in an api/settings/setting-isauthenticationenabled PUT request...

360 Wireless IP Camera is vulnerable (CNVD-2018-06852)

360 Wireless IP Camera is a webcam product from China's Qihoo 360 Qihu 360. A security vulnerability exists in the 360 Wireless IP Camera, which originates from the root account using a known SHA-512 password hash. The vulnerability can be exploited by a remote attacker to gain administrative...

CVE-2016-0235

IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administrator access to a hardcoded password, related to use on GRUB systems. IBM X-Force ID: 110326...

CVE-2017-18223

BMC Remedy AR System before 9.1 SP3, when Remedy AR Authentication is enabled, allows attackers to obtain administrative access...

OTRS Command Injection

Exploit Title: OTRS Authenticated file upload Date: 03-03-2018 Exploit Author: Ali BawazeEer Vendor Homepage: https://www.otrs.com/ Software Link: http://ftp.otrs.org/pub/otrs/ Version:5.0.2, 5.0.0 - 5.0.24, 6.0.0 - 6.0.1 Tested on: OTRS 5.0.2/CentOS 7.2.1511 CVE : CVE-2018-7567 Vulnerability...

CVE-2017-11632

CVE-2017-11632 affects Wireless IP Camera 360 devices. A root account exists with a known SHA-512 password hash, enabling remote attackers to obtain administrative access via TELNET. Multiple connected sources corroborate the root-privilege risk and remote TELNET vector, with high-severity impact...

Cisco Elastic Services Controller Software Authentication Bypass Vulnerability

Cisco Elastic Services Controller Software ESC is the U.S. Cisco Cisco, a set of open source for the management of virtual resources modular system. An authentication bypass vulnerability exists in the authentication feature of the Web-based business portal in Cisco Elastic ESC version 3.0.0, whi...

CVE-2018-0130

A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to gain administrative access to an affected system. The vulnerability is due to the presence of static default credentials f...

CVE-2018-0130

A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to gain administrative access to an affected system. The vulnerability is due to the presence of static default credentials f...

CVE-2016-9569

The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service out-of-bounds read and system crash via a large counter value in an 0x62430028 IOCTL call...

CVE-2018-6824

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"[email protected]"' request, which can be followed by a password reset...

Cross site request forgery (csrf)

Cozy version 2 has XSS allowing remote attackers to obtain administrative access via JavaScript code in the url parameter to the /api/proxy URI, as demonstrated by an XMLHttpRequest call with an 'email:"email protected"' request, which can be followed by a password reset...

UBUNTU-CVE-2016-3952

web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/templateexamples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access...

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I lies in the rigid encoding of registration data, which allows a intruder to gain access to the device with administrator rights.

The vulnerability of the ACTi series D, B, E, and I video surveillance camera microprogramming systems is related to the use of a pre-installed administrator account. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device with administrator privileges...