CVE-2016-6762

An elevation of privilege vulnerability in the libziparchive library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not...

Microsoft Edge Privilege Elevation Vulnerability (3214288)

This host is missing an important security update according to Microsoft Bulletin MS17-001. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Enigma Fileless UAC Bypass Exploit

This Metasploit module is an implementation of fileless uac bypass using cmd.exe instead of powershell.exe OJ msf module. This module will create the required registry entry in the current user's hive, set the default value to whatever you pass via the EXECCOMMAND parameter, and runs eventvwr.exe...

Nagios Incompletely Fixes Local Elevation of Privilege Vulnerability

Nagios is an American programmer Ethan Galstad developed a set of open source system status and network information monitoring program. The program provides network service monitoring, host resource monitoring, SMS alerts and other functions. Nagios has a local elevation of privilege vulnerabilit...

Oracle MySQL 5.6.x < 5.6.35 Multiple Vulnerabilities

Binary data 9845.prm...

Oracle MySQL 5.5.x < 5.5.54 Multiple Vulnerabilities

Binary data 9844.prm...

Oracle MySQL 5.7.x < 5.7.17 Multiple Vulnerabilities

Binary data 9846.prm...

Popcorn Time DLL Hijacking Vulnerability

Popcorn Time is an open source movie player that plays HD movies directly from cloud servers via seed files. A DLL hijacking vulnerability exists in Popcorn Time version 5.6, which can be exploited by local attackers to inject code or gain advanced access...

WampServer Arbitrary Code Execution Vulnerability

WampServer is an integrated installation of Apache, Mysql and PHP for the Windows platform. A security vulnerability exists in the wampmanager.exe and unins000.exe files in WampServer version 3.0.6. A local attacker can replace the source file with the wampmanager.exe executable or the unins000.e...

Nagios Local Elevation of Privilege Vulnerability (CNVD-2016-13293)

Nagios is an American programmer Ethan Galstad developed a set of open source system status and network information monitoring program. The program provides network service monitoring, host resource monitoring, SMS alerts and other functions. A local exploit exists in Nagios. A local attacker cou...

Code injection

WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit th...

CVE-2016-10072

WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local...

Code injection

WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local...

CVE-2016-10072

WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local...

CVE-2016-10031

WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit th...

CVE-2016-10031

Summary (CVE-2016-10031) WampServer 3.0.6 is affected by weak file permissions in two services, wampapache and wampmysqld , which run with SYSTEM privileges. An authorized local user could replace the original executables (mysqld.exe or httpd.exe); on the next service start, the malicious file wo...

Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation

===================================================== Vendor Homepage: http://www.wampserver.com/ Date: 10 Dec 2016 Version : Wampserver 3.0.6 32 bit x86 Tested on: Windows 7 Ultimate SP1 EN Author: Heliand Dema Contact: [email protected] =====================================================...

Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits ===================================================== Vendor Homepage: http://www.wampserver.com/ Date: 10 Dec 2016 Version : Wampserver 3.0.6 32 bit x86 Tested on: Windows 7 Ultimate SP1 EN Author: Heliand Dema Contact: email protected...

CVE-2016-7091

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw ...

CVE-2016-7091

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw ...