CVE-2017-3222

Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager...

Avast Antivirus Local Elevation of Privilege Vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswSnx.sys kernel of Avast Antivirus. A local attacker can exploit this vulnerability to gain root privileges...

CVE-2016-7819

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

WMI Event Subscription Event Log Persistence

This module will create a permanent WMI event subscription to achieve file-less persistence using an event filter that will query the event log for an EVENTIDTRIGGER default: failed logon request id 4625 that also contains a specified USERNAMETRIGGER note: failed logon auditing must be enabled on...

Nextcloud: HTML injection and limited XSS via logo image upload - Nextcloud 12.0.0

Summary The logo image upload function in Nextcloud Server v12.0.0 does not validate the uploaded file, leading to XSS in certain circumstances. Vulnerable URLs Replace server with the IP address or hostname of your Nextcloud server. File upload -...

Xunfei Jingcheng Smart Campus Website Management System Has Overstepping Vulnerabilities

Smart Campus website management system is a classroom management system based on constructivist learning theory, "Internet +" way of thinking and big data, cloud computing and other information technology. CyberLink Smart Campus website management system is vulnerable to an override vulnerability...

IBM Distributed Marketing, Marketing Platform and Marketing Operations Remote Elevation of Privilege Vulnerability

IBM Distributed Marketing, Marketing Platform and Marketing Operations are all products of IBM Corporation in the U.S. IBM Distributed Marketing is a suite of omni-channel marketing solutions.IBM Marketing Platform IBM Distributed Marketing is an omni-channel marketing solution. IBM Marketing...

Foreman Remote Lift Vulnerability (CNVD-2017-10574)

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A remote privilege extraction vulnerability exists in Foreman. An attacker could use this vulnerability ...

CVE-2016-4856

Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

Microsoft SharePoint Server Remote Code Execution Vulnerability (3191913)

This host is missing an important security update for Microsoft SharePoint Server according to Microsoft KB3191913 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2016-4866

Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Project function...

Hacker Reveals Easiest Way to Hijack Privileged Windows User Session Without Password

You may be aware of the fact that a local Windows user with system rights and permissions can reset the password for other users, but did you know that a local user can also hijack other users' session, including domain admin/system user, without knowing their passwords? Alexander Korznikov, an...

SonicDICOM PACS 2.3.2 Remote Vertical Privilege Escalation

SonicDICOM PACS 2.3.2 Remote Vertical Privilege Escalation Exploit Vendor: JIUN Corporation Product web page: https://www.sonicdicom.com Affected version: 2.3.2 and 2.3.1 Summary: SonicDICOM is PACS software that combines the capabilities of DICOM Server with web browser based DICOM Viewer. Desc:...

SonicDICOM PACS 2.3.2 Remote Vertical Privilege Escalation Exploit

Exploit for windows platform in category web applications SonicDICOM PACS 2.3.2 Remote Vertical Privilege Escalation Exploit Vendor: JIUN Corporation Product web page: https://www.sonicdicom.com Affected version: 2.3.2 and 2.3.1 Summary: SonicDICOM is PACS software that combines the capabilities ...

SonicDICOM PACS 2.3.2 - Privilege Escalation

SonicDICOM PACS 2.3.2 Remote Vertical Privilege Escalation Exploit Vendor: JIUN Corporation Product web page: https://www.sonicdicom.com Affected version: 2.3.2 and 2.3.1 Summary: SonicDICOM is PACS software that combines the capabilities of DICOM Server with web browser based DICOM Viewer. Desc:...

CVE-2016-3129

A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server GEMS implementation of the Apache Karaf command shell in GEMS versions 2.1.5.3 to 2.2.22.25 allows remote attackers to obtain local administrator rights on the GEMS server via commands executed on the Karaf...

PT-2016-2972 · Microsoft · Chakra Javascript Engine +3

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Microsoft Internet Explorer affected versions not specified Microsoft Windows affected versions not specified Description: The issue is caused by a buffer overflow in the Chakra JavaScript engine...

USN-3106-3 linux-raspi2 vulnerability

It was discovered that a race condition existed in the memory manager of the Linux kernel when handling copy-on-write breakage of private read-only memory mappings. A local attacker could use this to gain administrative privileges...

IBM AIX Local Elevation of Privilege Vulnerability

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM. A local elevation of privilege vulnerability exists in several versions of IBM AIX, which can be exploited by attackers to execute arbitrary code and gain administrator privileges...

Multiple vulnerabilities in turbomail

TurboMail email system is an email server system developed for the communication needs of enterprises and institutions. turbomail there are leakage of user mailbox vulnerability, can be login blast vulnerability login authentication code bypass, ordinary user privilege injection vulnerability, if...