Nagios Privilege Escalation Vulnerability

Nagios is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagios"; if...

Cisco Hybrid Media Service Privilege Escalation Vulnerability

A vulnerability in the installation procedure of the Cisco Hybrid Media Service could allow an authenticated, local attacker to elevate privileges to the root level. The vulnerability is due to incorrect installation and permissions settings on binary files during the Hybrid Media Service...

CryptSetup Ubuntu 16.4 CVE2016-4484 - Privilege Escalate

Document Title: =============== CryptSetup Ubuntu 16.4 CVE2016-4484 - Privilege Escalate References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2014 Video: https://www.youtube.com/watch?v=81Qam91pRoE Credits:...

CryptSetup Ubuntu 16.4 CVE2016-4484 - Privilege Escalate

Document Title: =============== CryptSetup Ubuntu 16.4 CVE2016-4484 - Privilege Escalate References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2014 Video: https://www.youtube.com/watch?v=81Qam91pRoE Credits:...

CMS EditMe Cross Site Request Forgery Vulnerability

CMS EditMe suffers from cross site request forgery vulnerability that allows for privilege escalation. ===================================================== Exploit Title : CMS EditMe - Privilege Escalate CSRF Vulnerability Date Discovered : 2016-11-04 Affected Products: EditMe - Content Manageme...

CMS EditMe Cross Site Request Forgery

===================================================== Exploit Title : CMS EditMe - Privilege Escalate CSRF Vulnerability Date Discovered : 2016-11-04 Affected Products: EditMe - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested OS : Windows 10...

EditMe CMS - CSRF Privilege Escalate Web Vulnerability

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ==================================== 19...

EditMe CMS - CSRF Privilege Escalate Web Vulnerability

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (3192892)

This host is missing an important security update according to Microsoft Bulletin MS16-123. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Advisory - Multiple Security Vulnerabilities in Driver of Huawei Smart Phones

There are two stack overflow vulnerabilities in video driver. An attacker may trick a user into installing a malicious application and the application can send given parameter to video driver to crash the system or escalate user privilege. Vulnerability ID: HWPSIRT-2016-08056 and HWPSIRT-2016-080...

Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability

Product & Service Introduction: =============================== Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time is Developer Friendly, it offers a simple...

VulnCheck KEV: CVE-2016-7089

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN...

Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability

Document Title: =============== Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1923 Release Date: ============= 2016-09-08 Vulnerability Laboratory ID VL-ID: ==================================== 19...

Apple OS X AppleHDA Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AppleHDA kernel...

phpCollab CMS 2.5 Cross Site Request Forgery

Document Title: =============== phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1911 Release Date: ============= 2016-08-17 Vulnerability Laboratory ID VL-ID: ====================================...

Jaws CMS 1.1.1 Cross Site Request Forgery

Document Title: =============== Jaws CMS v1.1.1 - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1923 Release Date: ============= 2016-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 19...

phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability

Document Title: =============== phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1911 Release Date: ============= 2016-08-16 Vulnerability Laboratory ID VL-ID: ====================================...

Local Privilege Escalation in GlobalProtect Agent for OS X

A vulnerability was recently identified which allows a local user to escalate privileges through the GlobalProtect Agent for OS X Ref 97042...

GLSA-201607-12 : Exim: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201607-12 Exim: Arbitrary code execution Vulnerabilities have been discovered in Exims implementation of set-uid root and when using perlstartup. These vulnerabilities require a user account on the Exim server and a configuration...

Meinberg NTP Time Server ELX800/GPS M4x V5.30p - Remote Command Execution / Escalate Privileges

!/usr/bin/python EDB Note: Source https://github.com/securifera/CVE-2016-3962-Exploit EDB Note: More info https://www.securifera.com/blog/2016/07/17/time-to-patch-rce-on-meinberg-ntp-time-server/ 271 - trigger notifications 299 - copy user defined notifications Kernel Version: 2.6.15.1 System...