5513 matches found
DEBIAN-CVE-2019-11324
The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the correct outcome. This is related to use o...
CVE-2019-1830
A vulnerability in Locally Significant Certificate LSC management for the Cisco Wireless LAN Controller WLC could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service DoS condition. The attacker would need to have valid administrato...
CVE-2019-1830
A vulnerability in Locally Significant Certificate LSC management for the Cisco Wireless LAN Controller WLC could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service DoS condition. The attacker would need to have valid administrato...
ManageEngine Applications Manager 11.0 < 14.0 - SQL Injection / Remote Code Execution Exploit
This Metasploit module exploits SQL injection and command injection vulnerabilities in ManageEngine AM 14 and prior versions. An unauthenticated user can gain the authority of "system" on the server due to the SQL injection vulnerability. The exploit allows the writing of the desired file to the...
ManageEngine Applications Manager 11.0 14.0 - SQL Injection Remote Code Execution (Metasploit)
ManageEngine Applications Manager 11.0 14.0 - SQL Injection Remote Code Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ManageEngine Applications Manager 11.0 %q This module...
ManageEngine Applications Manager 11.0 < 14.0 - SQL Injection / Remote Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "ManageEngine Applications Manager 11.0 %q This module exploits sql and command injection vulnerability in the ManageEngine AM 14 and prior version...
Cisco Wireless LAN Controller Locally Significant Certificate Denial of Service Vulnerability
A vulnerability in Locally Significant Certificate LSC management for the Cisco Wireless LAN Controller WLC could allow an authenticated, remote attacker to cause the device to unexpectedly restart, which causes a denial of service DoS condition. The attacker would need to have valid administrato...
SSL Root Certification Authority Distrusted
The remote service uses an SSL certificate chain that contains a root Certification Authority certificate at the top of the chain that is issued from a distrusted Certification Authority. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid124410; scriptversion"1.1";...
Microsoft Windows - AppX Deployment Service Privilege Escalation Exploit
Exploit for windows platform in category local exploits Microsoft Windows - AppX Deployment Service Privilege Escalation Exploit This vulnerability allows low privileged users to hijack file that are owned by NT AUTHORITY\SYSTEM by overwriting permissions on the targeted file. Successful...
Microsoft Windows - AppX Deployment Service Privilege Escalation
Microsoft Windows - AppX Deployment Service Privilege Escalation This vulnerability allows low privileged users to hijack file that are owned by NT AUTHORITY\SYSTEM by overwriting permissions on the targeted file. Successful exploitation results in "Full Control" permissions for the low privilege...
Microsoft Windows - AppX Deployment Service Privilege Escalation
This vulnerability allows low privileged users to hijack file that are owned by NT AUTHORITY\SYSTEM by overwriting permissions on the targeted file. Successful exploitation results in "Full Control" permissions for the low privileged user. 1. The exploit first checks if the targeted file exists, ...
It’s Time to End the NSA’s Metadata Collection Program
Opinion: Congress needs to pull the plug and end the authority for the CDR program...
Workspace App iOS - When launching resource receiving "You have chosen not to trust error 183"
Error:You have not chosen to trust CA error 183...
WINDOWS 10 IOT CORE remote command execution vulnerability verification and recommendations-vulnerability warning-the black bar safety net
1, Overview Recently, Ann days of microelectronics and embedded security development Department, Security days micro block for SafeBreach1the company's disclosure of the Windows IoT2operating systemthe security vulnerabilities carried out a detailed analysis and validation. An attacker exploiting...
CVE-2018-18435
KioWare Server version 4.9.6 and older installs by default to "C:\kiowarecom" with weak folder permissions granting any user full permission "Everyone: F" to the contents of the directory and it's sub-folders. In addition, the program installs a service called "KWSService" which runs as...
exacqVision 9.8 Unquoted Service Path Privilege Escalation
exacqVision 9.8 Unquoted Service Path Privilege Escalation Vendor: Exacq Technologies, Inc. Product web page: https://www.exacq.com Affected version: 9.8.4.150001 Summary: The exacqVision VMS Video Management System software records surveillance video from thousands of IP camera models and displa...
CVE-2018-18252
An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe provides "NT AUTHORITY\SYSTEM" access to unprivileged users via the --system option...
CVE-2018-18252
An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe provides "NT AUTHORITY\SYSTEM" access to unprivileged users via the --system option...
CVE-2018-18252
CVE-2018-18252 affects CapMon Access Manager 5.4.1.1005. The CALRunElevated.exe component allows an unprivileged user to obtain NT AUTHORITY\SYSTEM privileges via the --system option, constituting a local privilege escalation. The vulnerability is documented in NVD/CNVD records with CVSSv2/v3 bas...
