CVE-2016-4158

Adobe Creative Cloud Desktop on Windows prior to 3.7.0.272 is affected by CVE-2016-4158 (unquoted Windows search path) allowing local privilege escalation via a Trojan horse executable in %SYSTEMDRIVE%. Related CVE-2016-4157 affects installer search paths. The issue is addressed by the APSB16-21 ...

CVE-2016-4157

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

CVE-2016-4157

CVE-2016-4157 affects Adobe Creative Cloud Desktop Application for Windows prior to 3.7.0.272. The issue is an untrusted search path vulnerability in the installer , enabling local users to gain privileges via a Trojan horse resource in an unspecified directory. This CVE is part of a set describe...

Adobe Creative Cloud Security Update (APSB16-21) - Windows

Adobe Creative Cloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:creativecloud";...

Adobe Creative Cloud Desktop Application Unreferenced Service Path Enumeration Vulnerability

Adobe Creatie Cloud Desktop is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial photography and desig...

Arbitrary File Upload Vulnerability in New Harvest Technology Creative Portal Information Management System

Creative Portal Management System is a creative information publishing platform applied in the construction of New Harvest Technology. The New Harvest Technology Creative Portal Information Management System has an arbitrary file upload vulnerability that allows attackers to exploit the...

AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits ---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploit Author : Cyril...

Arbitrary File Download Vulnerability in New Harvest Technology Creative Portal Information Management System

Creative Portal Management System is a creative information publishing platform applied in the construction of New Harvest Technology. An arbitrary file download vulnerability exists in the New Harvest Technology Creative Portal Information Management System, which allows an attacker to exploit t...

AdobeUpdateService 3.6.0.248 Privilege Escalation

---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://www.adobe.com/fr/...

Adobe Creative Cloud Desktop Application untrustworthy search path vulnerability

Adobe Creatie Cloud Desktop is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial photography and desig...

AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation

AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation ---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploi...

AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation

---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://www.adobe.com/fr/...

Fix Coming for Flash Vulnerability Under Attack

Adobe today said it will patch Flash Player this week, addressing a vulnerability being exploited in “limited, targeted attacks.” The flaw, CVE-2016-4171, exists in versions of Flash prior to, and including, 21.0.0.242 on Windows, Macintosh, Linux and ChromeOS platforms. “Successful exploitation...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in DNG Software Development Kit SDK, Brackets, Creative Cloud Desktop Application, and Cold Fusion. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and...

APSB16-21 Security update available for the Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application for Windows. This update resolves an untrusted search path vulnerability in the Creative Cloud Desktop Application installer, and an unquoted service path enumeration vulnerability in the Creative Cloud Desktop...

WordPress CM Ad Changer 1.7.7 Cross Site Scripting

Exploit Title: CM Ad Changer Plugin XSS Date: 9/6/2016 Exploit Author: Aaditya Purani Author Homepage: https://aadityapurani.com Vendor Homepage: https://ad-changer.cminds.com Software Link: https://downloads.wordpress.org/plugins/cm-ad-changer.zip Updated Version: 1.7.7 Tested on: Wordpress 4.5....

WordPress Creative Multi-Purpose Theme 9.1.3 - Stored XSS

Creative Multi-Purpose theme is prone to a stored XSS vulnerability. Solution Upgrade the theme...

WordPress Theme Creative Multi-Purpose 9.1.3 - Persistent Cross-Site Scripting

WordPress Theme Creative Multi-Purpose 9.1.3 - Persistent Cross-Site Scripting Vendor Homepage: http://bridge.qodeinteractive.com/ Software Link: http://themeforest.net/item/bridge-creative-multipurpose-wordpress-theme/7315054 Version: 9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Stored XSS,...

Adobe Creative Cloud Installed

Binary data adobecreativecloudinstalled.nbin...

Adobe Creative Cloud <= 3.5.1.209 Arbitrary File Read/Write Vulnerability

The version of Adobe Creative Cloud installed on the remote Windows host is prior or equal to 3.5.1.209. It is, therefore, affected by a flaw in the JavaScript API for Creative Cloud Libraries due to an exposed service. An unauthenticated, remote attacker can exploit this to read or write arbitra...