ZendStudio IDE Privilege Vulnerability

Zend Studio is Zend Technologies developed PHP language integrated development environment Integrated Development Environment IDE, which combines PHP and mobile development , and includes some simple mobile application source code. An elevation of privilege vulnerability exists in ZendStudio IDE...

Abyss Web Server X1 2.11.1 Privilege Escalation

Exploit Title: Abyss Web Server X1 2.11.1 Multiple Local Privilege Escalation Date: 05/10/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Author twitter: @tulpasecurity Vendor Homepage: http://aprelium.com/ Application Download:...

Icecream Apps Insecure File Permissions / Privilege Escalation

Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream Ebook Reader 4.21 | Icecream Screen Recorder 4.21...

Battle.Net 1.5.0.7963 Privilege Escalation

Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link: https://eu.battle.net/account/download/ Version: Version 1.5.0.7963 Tested...

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation

Battle.Net 1.5.0.7963 - Insecure File Permissions Privilege Escalation Exploit Title: Battle.Net 1.5.0.7963 Local Privilege Escalation Date: 11/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: www.battle.net Software Link:...

nitroslider,1.0.0

nitroslider,1.0.0 open folder permissions update to 1.0.1 update notice: https://www.themechoice.com/joomla-extensions/nitro-layer-slider...

Riot Games League of Legends - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits ------------------------------------------------------------------------------------ Exploit Title: Riot Games League of Legends Insecure File Permissions Privilege Escalation Date: 03/06/16 Exploit Author: Cyril Vallicari i give credit also...

mod fancy tag cloud,1.017,Other

mod fancy tag cloud comofflajninstaller,1.017,Other resolution: update to version 1.020 update notice: http://fancytagcloud.demo.offlajn.com/index.php/security-update existing users may also need to fix folder permissions, please contact the developer for further information...

Resize Image On The Fly and Cache 1.1.0 and previous

Resize Image On The Fly and Cache - content plugin by s2software.it Version 1.1.0 and likely all previous Open folder permissions Resolution: update to version 1.3.3 Existing users will need to manually fix the permissions of folder /images/cache to 755 or delete it in order to be recreated by th...

CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

致远A8-m企业版v3.20SP1协同管理软件几个小问题打包

简要描述： 本次发现致远A8-m企业版v3.20SP1协同管理软件中的几个小问题，如下： 1.公文管理功能中的文件夹权限越权管理； 2.越权查看指定用户的待办业务（只能查看标题，内容无法访问）； 3.指定后缀文件上传。 详细说明： 1.公文管理功能中的文件夹权限越权管理 在公文管理功能中，高权限的用户可以在文件夹的属性中指定该文件夹的访问权限。但是在操作过程中，用户可以通过修改链接中的关键参数实现对文件夹权限的控制。 下图为正常权限中用户对文件夹属性的访问截图 下图为修改关键参数截图，将参数中的false改为true即可激活相应的权限控制 下图为修改权限之后的访问截图...

ImageVue 0.16.1 dir.php Folder Permission Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content injection. Successful exploitation...

McAfee VirusScan Enterprise 8.8 < 8.8 Patch 1 DoS

The remote Windows host has a version of McAfee VirusScan Enterprise VSE 8.8 prior to 8.8 Patch 1. It is, therefore, affected by a denial of service vulnerability due to a flaw in Self Protection. Malicious software can change the NTFS folder permissions on VSE folders and disable the software. C...

k2, 2.6.6, Open Folder Permissions

k2, Open folder permissions developer notice http:/getk2.org/blog/1432-k2-v267-released-akismet-integrated-new-acl-option-improved-php-54-support...

Private data can be disclosed to other computer users, or be modified by them – Opera Security Advisories

Private data such as cache, password files, and Opera’s configuration files are supposed to be visible only to the user who owns the Opera profile. Opera does not set the profile folder permissions correctly, allowing other computer users to read the sensitive contents of profile files. In some...

CVE-2010-5283

Cross-site request forgery CSRF vulnerability in OpenText ECM formerly Livelink ECM 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions...

Microsoft Office Privilege Elevation Vulnerability (2721015) - Mac OS X

This host is missing an important security update according to Microsoft Bulletin MS12-051. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-051: Vulnerability in Microsoft Office for Mac Could Allow Elevation of Privilege (2721015) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Office for Mac that is affected by a privilege escalation vulnerability in the way that folder permissions are set in certain installations. If an attacker places a malicious executable in the Office 2011 folder and lures a user into...

VMSA-2012-0007 VMware hosted products and ESX patches address privilege escalation

The remote ESXi is missing one or more security related Updates from VMSA-2012-0007. Summary VMware hosted products and ESXi/ESX patches address privilege escalation. Relevant releases Workstation 8.0.1 and earlier Player 4.0.1 and earlier Fusion 4.1.1 and earlier ESXi 5.0 without patch...

VMware ESXi/ESX patches address privilege escalation (VMSA-2012-0007)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0007. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...