Pushwoosh: Administrator Access To Management Console

Malicious user had the administrator access to RabbitMQ...

Arbitrary File Upload Vulnerability in Dotclear

Dotclear is an open source free web publishing software, created by Olivier Meunier in 2002. Dotclear suffers from an arbitrary file upload vulnerability. Due to the administrator theme management page blogtheme.php, inc/core/class.dc.modules.php there is a theme legitimacy checking problem,...

EditMe CMS - CSRF Privilege Escalate Web Vulnerability

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ==================================== 19...

IBM AIX lquerylv Local Privilege Vulnerability

IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM. A local privilege exploit exists in the lquerylv program in several versions of IBM AIX, which can be exploited by an attacker to execute arbitrary code and gain administrator privileges...

Weak password vulnerability in MPSec-VPN3005S-AC model device

The MPSec-VPN3005S-AC model device is a security gateway developed by Maipu. A weak password vulnerability exists in the MPSec-VPN3005S-AC device. A weak password vulnerability exists in port 23 of the MPSec-VPN3005S-AC device, which can be exploited by an attacker to log in to the system and gai...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2016-10535)

NVIDIA NVIDIA Corporation, NASDAQ: NVDA, official Chinese name NVIDIA is a fabless IC semiconductor company that designs smart-core chipsets.The NVIDIA GPU Display Driver is a driver developed by the company for its GPUs. A local elevation of privilege vulnerability exists in NVIDIA GPU Display...

Default Password '7ujMko0admin' for 'admin' Account

The account 'admin' on the remote host has the default password '7ujMko0admin'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "7ujMko0admin";...

CVE-2016-8290

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Performance Schema, a different vulnerability than CVE-2016-5633...

CVE-2016-5634

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to RBR...

CVE-2016-5633

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Performance Schema, a different vulnerability than CVE-2016-8290...

CVE-2016-5632

Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer...

CVE-2016-5629

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated...

CVE-2016-3495

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB...

Abyss Web Server Elevation of Privilege Vulnerability

Abyss Web Server is a free WEB service program available for Windows and Linux operating systems. Multiple elevation of privilege vulnerabilities exist in Abyss Web Server X1 version 2.11.1, which can be exploited by an attacker to gain system administrator privileges...

phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability

Product & Service Introduction: =============================== phpCollab is an open source internet-enabled system for use in projects that require collaboration over the internet. Those organizations, such as consulting firms, that rely on a division between firm-side and client-side informatio...

CVE-2016-7561

Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user credentials by reading the pam.log file...

Weak Password Vulnerability in Netnifty Internet Behavior Management System

Leadsec Internet Behavior Management System referred to as Leadsec ACM is an all-round solution for Internet access users in terms of information content security, network application management, organizational operational efficiency, network resource utilization, legal risk avoidance and network...

Blat Stack Overflow Vulnerability

Blat is an open source Windows command line SMTP mail manager , with automatic mail delivery and HTML form content and other features . A stack overflow vulnerability exists in Blat version 3.2.14. An attacker can exploit this vulnerability to gain administrator privileges or launch a DOS attack...

The vulnerability of the Windows operating system, which allows a perpetrator to gain access from the administrator’s perspective

The vulnerability of the Windows operating system is related to incorrect access control. Exploiting this vulnerability can allow a local attacker to gain access from the administrator through a specially crafted DLL library...

CVE-2016-3346

Microsoft Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain Administrator access via a crafted DLL, aka "Windows Permissions Enforcement Elevation of Privilege Vulnerability."...