Netgear Genie 2.4.32 - Unquoted Service Path Privilege Escalation

Exploit Title: Netgear Genie 2.4.32 Unquoted Service Path Elevation of Privilege Date: 30/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.netgear.com Software Link: https://www.netgear.com/home/discover/apps/genie.aspx?...

WampServer v3.0.6 - Insecure File Permissions

Document Title: =============== WampServer v3.0.6 - Insecure File Permissions References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1964 Release Date: ============= 2016-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 1964 Common...

Zortam MP3 Studio v21.15 - Insecure File Permissions

Document Title: =============== Zortam MP3 Studio v21.15 - Insecure File Permissions References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1963 Release Date: ============= 2016-09-28 Vulnerability Laboratory ID VL-ID: ==================================== 1963...

Glassfish Server - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Title: Glassfish Server - Unquoted Service Path Privilege Escalation Date: 28/09/2016 Author: s0nk3y Software link: https://glassfish.java.net/download.html Tested: Windows Server 2008 r2 Metasploitable3 1. Description Glassfish Server a...

Iperius Remote 1.7.0 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Iperius Remote 1.7.0 Unquoted Service Path Elevation of Privilege Date: 26/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: http://www.iperiusremote.com Software...

Iperius Remote 1.7.0 - Unquoted Service Path Privilege Escalation

Iperius Remote 1.7.0 - Unquoted Service Path Privilege Escalation Exploit Title: Iperius Remote 1.7.0 Unquoted Service Path Elevation of Privilege Date: 26/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage:...

Elantech-Smart Pad 11.9.0.0 - Unquoted Service Path Privilege Escalation

Elantech-Smart Pad 11.9.0.0 - Unquoted Service Path Privilege Escalation Exploit Title: Elantech Smart-Pad Unquoted Service Path Privilege Escalation Date: 24/09/2016 Exploit Author: [email protected] Vendor Homepage: http://www.emc.com.tw/eng/ Version: 11.9.0.0 Tested on: Windows 7 64bit...

Macro Expert 4.0 - Multiple Privilege Escalations

Macro Expert 4.0 - Multiple Privilege Escalations Exploit Title: Macro Expert 4.0 Multiple Elevation of Privilege Date: 26/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.macro-expert.com/ Software Link:...

MariaDB 10.1.0 < 10.1.9 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.9. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.9 advisory. - Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality,...

Macro Expert 4.0 - Multiple Privilege Escalations

Exploit Title: Macro Expert 4.0 Multiple Elevation of Privilege Date: 26/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.macro-expert.com/ Software Link: http://www.macro-expert.com/download.htm Version: Software...

NetDrive 2.6.12 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: NetDrive 2.6.12 Unquoted Service Path Elevation of Privilege Date: 24/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: http://www.netdrive.net/ Software Link:...

NetDrive 2.6.12 - Unquoted Service Path Privilege Escalation

NetDrive 2.6.12 - Unquoted Service Path Privilege Escalation Exploit Title: NetDrive 2.6.12 Unquoted Service Path Elevation of Privilege Date: 24/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.netdrive.net/ Softwa...

Elantech-Smart Pad 11.9.0.0 Privilege Escalation

Exploit Title: Elantech Smart-Pad Unquoted Service Path Privilege Escalation Date: 24/09/2016 Exploit Author: [email protected] Vendor Homepage: http://www.emc.com.tw/eng/ Version: 11.9.0.0 Tested on: Windows 7 64bit ====Description==== Elantech Smart-Pad Service lacks of quotes in the filepat...

Iperius Remote 1.7.0 - Unquoted Service Path Privilege Escalation

Exploit Title: Iperius Remote 1.7.0 Unquoted Service Path Elevation of Privilege Date: 26/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.iperiusremote.com Software Link: https://www.iperiusremote.com/download.aspx...

Wise Care 365 4.27 / Wise Disk Cleaner 9.29 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Wisecleaner Software Multiple Unquoted Service Path Elevation of Privilege Date: 23/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: http://www.wisecleaner.com...

AnyDesk 2.5.0 Privilege Escalation

Exploit Title: AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege Date: 22/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://anydesk.com Software Link: http://anydesk.com/download Version: Software Version 2.5.0...

AnyDesk 2.5.0 - Unquoted Service Path Privilege Escalation

Exploit Title: AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege Date: 22/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://anydesk.com Software Link: http://anydesk.com/download Version: Software Version 2.5.0...

Citrix XenServer Multiple Vulnerabilities (CTX216071)

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities : - A flaw exists due to improper handling of pagetable walks that contain recursive L3 pagetable entries. An attacker on the guest can exploit this to...

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2016-07747)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows. An attacker could exploit the vulnerability to execute arbitrary code with elevated privileges...

VMware Tools Local Elevation of Privilege Vulnerability (CNVD-2016-07808)

VMware Tools is a set of enhancements that come with VMware's VMWare virtual machines. It is a set of drivers provided by VMware to enhance the performance of virtual graphics cards and hard drives, as well as to synchronize the clocks of the virtual machines with those of the host computer. A...