163 matches found
CVE-2020-7280
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise VSE prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing...
CVE-2020-7280 Symbolic Link vulnerability during DAT update
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise VSE prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing...
PT-2019-5514
Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions prior to 8.8 Patch 15 Description The issue is related to insufficient access control in McAfee VirusScan Enterprise, which can be exploited to elevate privileges. This can occur during daily DAT updates,...
CVE-2019-14707
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process is insecure, leading to remote code execution. The attacker can provide arbitrary firmware in a .dat file via a webparam?system&action=set&upgrade URI...
dat-network-protocol (>=0.1.3, <=0.1.4), grpc-compiler (>=0.3.1, <=0.4.0) +12 more potentially affected by CVE-2019-15544 via protobuf (>=1.0.24, <=1.7.4)
protobuf CARGO version =1.0.24, =0.1.3, =0.3.1, =1.7.2, =0.3.1, =0.0.1, =0.1.0, =0.1.2, =0.1.4 - tfdeploy 0.0.9 - thinker 0.0.1 Source cves: CVE-2019-15544 Source advisory: OSV:RUSTSEC-2019-0003...
Check Point ZoneAlarm 8.8.1.110 - Local Privilege Escalation Exploit
Exploit for windows platform in category local exploits Exploit Title: Check Point ZoneAlarm Local Privilege Escalation Exploit Author: Chris Anastasio Vendor Homepage: https://www.zonealarm.com/software/free-antivirus/ Software Link: Vulnerable Versions included in repo Version: ZoneAlarm Free...
(0Day) Wecon PIStudio cximageu Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Wecon PIStudio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
PT-2017-17109
Name of the Vulnerable Software and Affected Versions Admidio version 3.2.5 Description A SQL Injection issue was discovered in the adm program/modules/dates/dates function.php module. The dat cat id parameter, which is passed via a POST request, is concatenated into a SQL query without proper...
DAT AUTOHUS - ContentProvider mode not defined, Dynamic Code Loading, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application DAT AUTOHUS published at the 'play' market has multiple vulnerabilities...
Schneider Electric VAMPSET COMTRADE Records Buffer Overflow (CVE-2014-8390)
A heap buffer overflow vulnerability exists in Schneider Electric VAMPSET software. The vulnerability is due to improper processing of specific parameters within CFG and DAT files of a COMTRADE record. A remote, unauthenticated attacker can exploit this vulnerability by enticing the victim to ope...
CVE-2014-8390
Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malformed disturbance-recording data in a 1 CFG or 2 DAT file...
Buffer overflow
Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malformed disturbance-recording data in a 1 CFG or 2 DAT file...
PT-2015-4038
Name of the Vulnerable Software and Affected Versions Schneider Electric VAMPSET versions prior to 2.2.168 Description The issue concerns multiple buffer overflows that can be triggered by local users through malformed disturbance-recording data in a CFG or DAT file, potentially allowing them to...
CVE-2014-8390: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malformed disturbance-recording data in a 1 CFG or 2 DAT file...
NCMedia Sound Editor Pro 7.5.1 - MRUList201202.dat File Handling Buffer Overflow
No description provided by source. !/usr/bin/python Exploit Title: NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Local Buffer Overflow Version: 7.5.1 Date: 2012-08-07 Author: Julien Ahrens Website: http://www.inshell.net Software Link: http://www.soundeditorpro.com/ Tested on:...
NCMedia Sound Editor Pro 7.5.1 - MRUList201202.dat File Handling Buffer Overflow
NCMedia Sound Editor Pro 7.5.1 - MRUList201202.dat File Handling Buffer Overflow !/usr/bin/python Exploit Title: NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Local Buffer Overflow Version: 7.5.1 Date: 2012-08-07 Author: Julien Ahrens Website: http://www.inshell.net Software Lin...
NCMedia Sound Editor Pro 7.5.1 Buffer Overflow
!/usr/bin/python Exploit Title: NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Local Buffer Overflow Version: 7.5.1 Date: 2012-08-07 Author: Julien Ahrens Website: http://www.inshell.net Software Link: http://www.soundeditorpro.com/ Tested on: Windows XP SP3 Professional German...
NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Buffer Overflow
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Local Buffer Overflow Version: 7.5.1 Date: 2012-08-07 Author: Julien Ahrens Website: http://www.inshell.net Software Link:...
NCMedia Sound Editor Pro 7.5.1 Buffer Overflow
Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: Sound Editor Pro v7.5.1 Vendor URL: www.soundeditorpro.com Type: Stack-based Buffer Overflow CWE-121 Date found: 2012-08-15 Date published: 2012-09-16 CVSSv2 Score: 6,9...
