PT-2016-2580 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a lack of proper access control in a Windows operating system kernel-mode driver, which can be exploited by a local attacker using a specially crafted...

The vulnerability of the Internet Explorer browser, which allows a malicious actor to execute web scripts with elevated privileges

The Internet Explorer browser contains a vulnerability that allows a malicious attacker to elevate their privileges level. By exploiting this vulnerability, a malicious individual cannot execute arbitrary code, but they can use it to exploit other vulnerabilities with elevated privileges for...

(Pwn2Own) Apple OS X IntelAccelerator Out-Of-Bounds Indexing Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

The vulnerability of the SAP HANA database management system allows attackers to obtain confidential information or enhance their privileges.

The vulnerability of the Data Provisioning Agent component of the SAP HANA database management system arises from an improper restriction on access to the functions of the service. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or...

Elevate - Brain Training - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Elevate - Brain Training published at the 'play' market has multiple vulnerabilities...

The vulnerability of the Moodle learning management system allows a hacker to modify data within arbitrary groups.

The vulnerability of the Moodle learning management system’s Forum module is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to modify data within arbitrary groups, thereby increasing their own influence as “teachers”...

Ubuntu: Security Advisory (USN-2858-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-2744-1] Apport vulnerability

========================================================================== Ubuntu Security Notice USN-2744-1 September 24, 2015 apport vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 14.04 LTS : Apport vulnerability (USN-2744-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2744-1 advisory. Halfdog discovered that Apport incorrectly handled kernel crash dump files. A local attacker could use this issue to cause a denial of service, or possibly elevat...

Ubuntu: Security Advisory (USN-2744-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DESTOON某处注入可以直接提升为管理员

简要描述： DESTOON sql注入漏洞 详细说明： 首先看一个函数 :dhtmlspecialchars function dhtmlspecialchars$string ifisarray$string return arraymap'dhtmlspecialchars', $string; else $string = htmlspecialchars$string, ENTQUOTES, DTCHARSET == 'GBK' ? 'GB2312' : 'UTF-8'; $string = strreplace'&', '&', $string;...

MicEnum - Mandatory Integrity Control Enumerator for Windows

In the context of the Microsoft Windows family of operating systems, Mandatory Integrity Control MIC is a core security feature introduced in Windows Vista and implemented in subsequent lines of Windows operating systems. It adds Integrity LevelsIL-based isolation to running processes and objects...

HP Data Protector has multiple vulnerabilities

HP Data Protector is a unified data protection solution. HP Data Protector has multiple security vulnerabilities that could allow a remote attacker to perform elevation of privilege, denial of service attacks, or execute arbitrary code...

CA LISA Release Automation contains multiple vulnerabilities

Overview CA LISA Release Automation 4.7.1.385 contains multiple vulnerabilities Description CWE-352: Cross-Site Request Forgery CSRF - CVE-2014-8246CA LISA Release Automation 4.7.1.385 contains a global Cross-Site Request Forgery CSRF vulnerability. The application allows a malicious user to...

USN-2297-1: acpi-support vulnerability

CESG discovered that acpi-support incorrectly handled certain privileged operations when checking for power management daemons. A local attacker could use this flaw to execute arbitrary code and elevate privileges to root...

(Pwn2Own) Microsoft Windows DirectShow Privilege Escalation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...

IBM DB2 db2stop Format String Arbitrary Code Execution

No description provided by source. source: http://www.securityfocus.com/bid/8989/info Multiple command-line parameter format string vulnerabilities have been discovered in various IBM DB2 binaries. Specifically, format-based functions are implemented erroneously within the db2govd, db2start, and...

MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...

MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (6)

No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...

TRENDnet Shell

Added: 06/24/2014 Background TRENDnet routers are vulnerable to a range of SQL injection, command injection, and buffer overflow vulnerabilities. Current supported devices include: TEW-654TR - Remote Root Shell TEW-732BR - Remote Root Shell Problem A SQL injection vulnerability allows the attacke...