1882 matches found
Apple iOS legacy-diagnostics Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must connect to a WiFi access point. The specific flaw exists within the usage of the legacy-diagnostics protoc...
Dell SonicWall Secure Remote Access Server Command Injection Vulnerability
Dell SonicWall Secure Remote Access is a SonicWALL Secure Remote Access Series appliance within the Dell SonicWall Secure Mobile Access solution. An input validation vulnerability in the diagnostics CGI /cgi-bin/diagnostics component of the web management interface of the Dell SonicWall Secure...
CVE-2016-9682
The SonicWall Secure Remote Access server version 8.1.0.2-14sv is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI /cgi-bin/diagnostics component responsible for emailing out information about the...
nationaldiagnostics.com XSS vulnerability
Vulnerable URL: https://www.nationaldiagnostics.com/msdsproduct2.php?catnum=EC-759A%27-confirmOPENBUGBOUNTY-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 644737 VIP website...
Director Error "Cannot retrieve data. Data source unresponsive or reported an error".
The following error is seen in the event viewer of the Director server: Log Name: Application Source: Citrix Director Service Date: 1/20/2017 11:05:33 AM Event ID: 5 Task Category: None Level: Error Keywords: Classic User: N/A Computer: CtxDirector.RepLab.Local Description: The description for...
Clickjacking Vulnerability in HP Diagnostics
HP Diagnostics is a suite of end-to-end application management, monitoring, diagnostic analysis and troubleshooting solutions from Hewlett-Packard. A clickjacking vulnerability exists in HP Diagnostics. An attacker could exploit this vulnerability to steal cookie-based authentication credentials...
Google Patches Android 'Custom Boot Mode' Vulnerability
A high-risk Android custom boot mode vulnerability was one of many bugs patched by Google as part of its January Android Security Bulletin released earlier this week. On Thursday, the IBM security team that discovered the vulnerability disclosed details about the flaw which leaves Nexus 6 and 6P...
Microsoft Windows Diagnostics Hub - DLL Load Privilege Escalation (MS16-125)
/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=887 Windows: Diagnostics Hub DLL Load EoP Platform: Windows 10 10586, not tested 8.1 Update 2 or Windows 7 Class: Elevation of Privilege Summary: The fix for CVE-2016-3231 is insufficient to prevent a normal user specifying an...
CVE-2016-7188
The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...
CVE-2016-7188
The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...
Privilege escalation
The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...
CVE-2016-7188
The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...
CVE-2016-7188
The CVE-2016-7188 issue affects the Windows Diagnostics Hub Standard Collector Service on Windows 10 (Gold, 1511, 1607). The root cause is improper sanitization of input during library loading, leading to untrusted library loading and elevation of privileges for a local attacker who runs a crafte...
Microsoft Windows Diagnostics Hub Local Elevation of Privilege Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. A local elevation of privilege vulnerability exists in Microsoft Windows Diagnostics Hub. An attacker could use elevated system privileges to run arbitrary code...
MS16-125: Security Update for Windows Diagnostic Hub (3193229)
The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability in the Windows Diagnostics Hub Standard Collector service due to improper sanitization of user-supplied input. A local attacker can exploit this, via a specially crafted...
Microsoft Windows Diagnostics Hub Privilege Elevation Vulnerability (3193229)
This host is missing an important security update according to Microsoft Bulletin MS16-125. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Cumulative update for Windows 10 Version 1607 and Windows Server 2016: October 11, 2016
None None...
Cumulative update for Windows 10 Version 1511: October 11, 2016
None None...
Windows Diagnostics Hub Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system...