Veeam Backup & Replication Local Privilege Escalation Vulnerability

Challenge The vulnerability allows any local Windows user with low privileges, such as the ones provided to an anonymous IIS's virtualhost user, to access Veeam Backup logfiles and extract the password, used to run Veeam components, which is stored as a doublebase64 encoded string. Cause The...

Apple TV < 9.1 Multiple Vulnerabilities

According to its banner, the version of the remote Apple TV device is prior to 9.1. It is, therefore, affected by multiple vulnerabilities in the following components : - AppleMobileFileIntegrity - Compression - CoreGraphics - CoreMedia Playback - Disk Images - dyld - ImageIO - IOAcceleratorFamil...

Microsoft Windows Win32k Elevation of Privilege (MS16-120: CVE-2016-3270)

An elevation of privilege vulnerability exists in Microsoft Windows Win32k. The vulnerability is caused when Microsoft Windows improperly deals with one of its kernel components. A successful exploitation could allow an attacker to run arbitrary code with elevated privileges...

Beckhoff Embedded PC Image and Automation Device Specification TwinCAT Component Security Bypass Vulnerability (CNVD-2016-08764)

Beckhoff Embedded PC Images and Automation Device Specification ADS TwinCAT Components are Beckhoff products for critical infrastructure applications in manufacturing, energy and wastewater systems. Beckhoff Embedded PC Images is a functionally configurable industrial control system for...

Beckhoff Embedded PC Image and Automation Device Specification TwinCAT Component Security Bypass Vulnerability

Beckhoff Embedded PC Images and Automation Device Specification ADS TwinCAT Components are Beckhoff products for critical infrastructure applications in manufacturing, energy and wastewater systems. Beckhoff Embedded PC Images is a functionally configurable industrial control system for...

[SECURITY] Fedora 25 Update: mojarra-2.2.13-1.fc25

JvaServerTM Faces technology simplifies building user interfaces for JavaServer applications. Developers of various skill levels can quickly bui ld web applications by: assembling reusable UI components in a page; connecting these components to an application data source; and wiring...

Open Monopoly - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Open Monopoly published at the 'play' market has multiple vulnerabilities...

JUST Students - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application JUST Students published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

Beckhoff Embedded PC images before 2014-10-22 and Automation Device Specification ADS TwinCAT components might allow remote attackers to obtain access via the 1 Windows CE Remote Configuration Tool, 2 CE Remote Display service, or 3 TELNET service...

Полиглот 16 Lite - Английский - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Полиглот 16 Lite - Английский published at the 'play' market has multiple vulnerabilities...

Tesla (S&X) - (Interface Pair) Code Execution Vulnerability

Document Title: =============== Tesla S&X - Interface Pair Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1586 Release Date: ============= 2016-10-03 Vulnerability Laboratory ID VL-ID: ==================================== 15...

Apple iOS < 10.0 Multiple Vulnerabilities

Binary data 9619.prm...

Volkswagen (GTE&E) - (Interface Pair) Code Execution

Document Title: =============== Volkswagen GTE&E - Interface Pair Code Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1606 Release Date: ============= 2016-10-01 Vulnerability Laboratory ID VL-ID: ==================================== 1606 Comm...

That Level Again 3 - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application That Level Again 3 published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel spreadsheet editor, and the Microsoft Excel Viewer allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel spreadsheet editor, and the Microsoft Excel Viewer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code using...

PT-2016-3313 · Openssl +3 · Openssl +3

Name of the Vulnerable Software and Affected Versions: OpenSSL versions 1.1.0 through 1.1.0a Description: The issue is related to an error in the resource control mechanism of the state-machine implementation in OpenSSL, specifically in statem/statem.c and statem/statem lib.c. This could allow a...

Wickr Me - Secure Messenger - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Wickr Me - Secure Messenger published at the 'play' market has multiple vulnerabilities...

The vulnerability of Oracle WebLogic Server application servers allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Oracle WebLogic Server application server is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of information by manipulating components related to WLS Core Components...

CVE-2016-7415

Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode ICU through 57.1 for C/C++ allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long locale string...

CVE-2016-7415

Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode ICU through 57.1 for C/C++ allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a long locale string...