CVE-2016-6470

A vulnerability in the installation procedure of the Cisco Hybrid Media Service could allow an authenticated, local attacker to elevate privileges to the root level. More Information: CSCvb81344. Known Affected Releases: 1.0...

CVE-2016-6470

CVE-2016-6470 affects Cisco Hybrid Media Service installer. An authenticated, local attacker could escalate to root due to incorrect installation and file permission settings on binary files during the HMS installation. Vulnerable component: HMS installer on affected releases (known release: 1.0)...

Ubuntu 16.10 : linux vulnerabilities (USN-3147-1)

Andreas Gruenbacher and Jan Kara discovered that the filesystem implementation in the Linux kernel did not clear the setgid bit during a setxattr call. A local attacker could use this to possibly elevate group privileges. CVE-2016-7097 Marco Grassi discovered that the driver for Areca RAID...

Teradata Studio Express 15.12.00.00 Race Condition Vulnerability

Exploit for linux platform in category local exploits Title: /tmp race condition in Teradata Studio Express v15.12.00.00 studioexpressinstall Author: Larry W. Cashdollar, @larry0 Date: 2016-10-03 Download Site: http://downloads.teradata.com/download/tools/teradata-studio-express Vendor: Teradata...

Google Android System UI Local Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. system UI is the system interface that comes with Android. A local elevation of privilege vulnerability exists in System UI in Android 7.0. A local attacker can exploit this...

Microsoft SQL Server RDBMS Engine Elevation of Privilege Vulnerability

Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in the Microsoft SQL Server RDBMS engine. An attacker can...

Cisco FireSIGHT System Software Privilege Escalation Vulnerability

A vulnerability in the web framework of the Cisco Firepower Management Center running on Cisco FireSIGHT System Software could allow authenticated, remote attackers to elevate privileges to access data outside their roles. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...

SolarWinds Kiwi Syslog Server Elevation of Privilege Vulnerability

SolarWinds network security management software products. The application can be installed on a windows system with the option to select the default security service. The default installation path "C:\Program Files x86" is selected when installing the 32-bit application, which may allow an...

Joyent SmartOS dtrace Zone Escape Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the dtrace implementation in SmartOS. A meth...

PT-2016-2580 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a lack of proper access control in a Windows operating system kernel-mode driver, which can be exploited by a local attacker using a specially crafted...

The vulnerability of the Internet Explorer browser, which allows a malicious actor to execute web scripts with elevated privileges

The Internet Explorer browser contains a vulnerability that allows a malicious attacker to elevate their privileges level. By exploiting this vulnerability, a malicious individual cannot execute arbitrary code, but they can use it to exploit other vulnerabilities with elevated privileges for...

(Pwn2Own) Apple OS X IntelAccelerator Out-Of-Bounds Indexing Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

The vulnerability of the SAP HANA database management system allows attackers to obtain confidential information or enhance their privileges.

The vulnerability of the Data Provisioning Agent component of the SAP HANA database management system arises from an improper restriction on access to the functions of the service. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or...

Elevate - Brain Training - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Elevate - Brain Training published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Moodle learning management system allows a hacker to modify data within arbitrary groups.

The vulnerability of the Moodle learning management system’s Forum module is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to modify data within arbitrary groups, thereby increasing their own influence as “teachers”...

Ubuntu: Security Advisory (USN-2858-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-2744-1] Apport vulnerability

========================================================================== Ubuntu Security Notice USN-2744-1 September 24, 2015 apport vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 14.04 LTS : Apport vulnerability (USN-2744-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2744-1 advisory. Halfdog discovered that Apport incorrectly handled kernel crash dump files. A local attacker could use this issue to cause a denial of service, or possibly elevat...

Ubuntu: Security Advisory (USN-2744-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DESTOON某处注入可以直接提升为管理员

简要描述： DESTOON sql注入漏洞 详细说明： 首先看一个函数 :dhtmlspecialchars function dhtmlspecialchars$string ifisarray$string return arraymap'dhtmlspecialchars', $string; else $string = htmlspecialchars$string, ENTQUOTES, DTCHARSET == 'GBK' ? 'GB2312' : 'UTF-8'; $string = strreplace'&', '&', $string;...