9327 matches found
Mobilis 3G mobiconnect 3G++ ZDServer 1.0.1.2 - Service Trusted Path Privilege Escalation
Exploit for windows platform in category local exploits Exploit Title:mobilis 3g mobiconnect 3G++ ZDServer 1.0.1.2 Service Trusted Path Privilege Escalation Date: 07/12/2014 Author: Hadji Samir email protected Product web page: http://www.3G.dz/ http://www.mobilis.dz/ Affected version: 1.0.1.2...
Multiple vulnerabilities in MantisBT
High-Tech Bridge Security Research Lab has discovered multiple vulnerabilities in MantisBT, which can be exploited to perform Cross-Site Scripting XSS and SQL injection attacks. Improper access control vulnerability discloses database's credentials login and password in plaintext. 1 Cross-Site...
iBackup Local Privilege Escalation Vulnerability - Windows
iBackup is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Privacyware Privatefirewall 7.0 Privilege Escalation Vulnerability
Privacyware Privatefirewall version 7.0 suffers from an unquoted search path issue impacting the Core Service 'PFNet' service for Windows deployed as part of Privatefirewall bundle. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated...
Flash Player For Mac <= 15.0.0.189 Multiple Vulnerabilities (APSB14-24)
According to its version, the installation of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to 15.0.0.189. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities allow an attacker to execute arbitrary code...
Google Chrome < 38.0.2125.122 Multiple Vulnerabilities (Mac OS X)
The version of Google Chrome installed on the remote Mac OS X host is a version prior to 38.0.2125.122. It is, therefore, affected by the following vulnerabilities due to the version of Adobe Flash bundled with the application : - Multiple memory corruption vulnerabilities allow an attacker to...
Flash Player < 15.0.0.223 Multiple Vulnerabilities (APSB14-24)
Binary data 8566.prm...
Microsoft Window Audio Service Privilege Escalation Vulnerability (3005607)
This host is missing an important security update according to Microsoft Bulletin MS14-071. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Flash Player <= 15.0.0.189 Multiple Vulnerabilities (APSB14-24)
According to its version, the installation of Adobe Flash Player installed on the remote Windows host is equal or prior to 15.0.0.189. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities allow an attacker to execute arbitrary code...
Adobe AIR <= 15.0.0.293 Multiple Vulnerabilities (APSB14-24)
According to its version, the installation of Adobe AIR installed on the remote Windows host is equal or prior to 15.0.0.293. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities allow an attacker to execute arbitrary code. CVE-2014-0576,...
Microsoft Internet Explorer Elevation of Privilege (MS14-065: CVE-2014-6349)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Microsoft Windows TCP/IP CVE-2014-4076 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 x64 Edition Service Pack 2...
Microsoft SharePoint Server CVE-2014-4116 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges in the context of the currently logged-in user. Successful exploits may aid in further attacks. Technologies...
Microsoft Internet Explorer Elevation of Privilege (MS14-065: CVE-2014-6350)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Microsoft .NET Framework CVE-2014-4149 Remote Privilege Escalation Vulnerability
Description Microsoft .NET Framework is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges within the context of the application; this can result in the attacker gaining complete control of the affected system. Technologies Affecte...
FreeBSD -- Kernel stack disclosure in setlogin(2) / getlogin(2)
Problem Description: When setlogin2 is called while setting up a new login session, the login name is copied into an uninitialized stack buffer, which is then copied into a buffer of the same size in the session structure. The getlogin2 system call returns the entire buffer rather than just the...
Cisco Ironport WSA telnetd Remote Code Execution Vulnerability
The Cisco Ironport WSA virtual appliances are vulnerable to an old FreeBSD telnetd encryption Key ID buffer overflow which allows remote attackers to execute arbitrary code. Cisco WSA Virtual appliances have the vulnerable telnetd daemon enabled by default. Cisco Ironport WSA Telnetd Remote Code...
Microsoft Windows CVE-2014-6352 OLE Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code and gain elevated privileges in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions...
Oracle Java SE JRE Multiple Unspecified Vulnerabilities-04 (Oct 2014) - Windows
Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Internet Explorer Elevation of Privilege (MS14-056; CVE-2014-4123)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...