Trango Altum AC600 Default Root Login

Credits: Ian Ling + Website: iancaling.com + Source: http://blog.iancaling.com/post/155395764003 Vendor: ================= https://www.trangosys.com/ Product: ====================== -Altum AC600 Vulnerability Details: ===================== Trango Altum AC600a2s have a default root login...

CVE-2016-8103

SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform...

CVE-2016-8103

SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform...

Full Control Permissions Granted to All Users in Profile Management

The Full Control permission has been granted to each user. For example, when a new user is created in Active Directory and logs on for the first time, a folder is created for that user in the user store. However, all users have permission to access that folder and perform operations on it...

Ubiquiti Inc.: Subdomain Takeover (moderator.ubnt.com)

Hello Team This report is same as 179110 One of your subdomain http://moderator.ubnt.com is pointing towards 216.58.203.243 moderator.ubnt.com 216.58.203.243 ghs.google.com 216.58.203.243 ghs.l.google.com F134183 And it is unclaimed When I open it it is showing F134184 Impact :- An attacker can...

Eir D1000 Modem CWMP Remote Command Execution

The Eir D1000 Modem has bugs that allow an attacker to gain full control of the modem from the Internet. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

FreeBSD : FreeBSD -- bhyve - privilege escalation vulnerability (a479a725-9adb-11e6-a298-14dae9d210b8)

An unchecked array reference in the VGA device emulation code could potentially allow guests access to the heap of the bhyve process. Since the bhyve process is running as root, this may allow guests to obtain full control of the hosts they are running on. Impact : For bhyve virtual machines with...

VMware vRealize Operations Remote Elevation of Privilege Vulnerability

VMware vRealize Operations is a set of policy-based, automated, intelligent IT operations and management software from VMware, Inc. A remote elevation of privilege vulnerability exists in VMware vRealize Operations. A remote attacker could exploit this vulnerability to gain full control of an...

Atlassian HipChat for JIRA Plugin Information Disclosure Vulnerability

Atlassian JIRA is a defect tracking management system from Atlassian Australia, which is used to track and manage all kinds of issues and defects in the workplace.HipChat is one of the plug-ins that provides group chat, file sharing, video chat and screen sharing features. A security vulnerabilit...

Microsoft Windows Graphics Remote Code Execution Vulnerability (CNVD-2016-06272)

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows due to a font library that does not properly handle constructed embedded fonts. This vulnerability could be exploited by an attacker to take full control of an affected...

WordPress Ultimate-Product-Catalog Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers to set up personal blog sites.Ultimate-Product-Catalog is one of the product catalog plugin. A SQL injection vulnerability exists in WordPress...

Red Hat Dashbuilder SQL Injection Vulnerability

Red Hat Dashbuilder is an open source platform for building business dashboards and reports from Red Hat USA. A SQL injection vulnerability exists in Red Hat Dashbuilder, which can be exploited by an attacker to take full control of the program and access or modify data...

Intuit QuickBooks SQL Injection Vulnerability

Intuit QuickBooks is a suite of small financial management software from Intuit, USA. A SQL injection vulnerability exists in Intuit QuickBooks versions 2007 to 2016, which can be exploited by an attacker to take full control of the program and access or modify data...

The vulnerability of the Windows operating system allows a perpetrator to execute arbitrary code or cause a service failure.

A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. This...

The vulnerability in the Windows Desktop Experience software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in the Windows event log system and is related to the processing of specially crafted files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted event log file. If the user...

Vulnerability of the Windows operating system, allowing a malicious individual to execute arbitrary code

A vulnerability that allows for remote execution of code exists in Microsoft Windows and is related to the processing of .bat and .cmd files executed from an external network. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install...

The vulnerability of the Microsoft Office software package allows a malicious individual to execute arbitrary code and gain full control over the system.

Microsoft Office software has vulnerabilities related to errors that occur during the processing of specially crafted files. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code and gain full control over the system...

Vulnerability of the Windows operating system, allowing a malicious individual to execute arbitrary code

The vulnerability exists in Windows components and is related to the processing of specially crafted two-dimensional 2D geometric figures. Exploiting this vulnerability allows for the execution of code remotely, provided that the user opens the file containing such specially crafted figures using...

The vulnerability of the Microsoft SharePoint software package allows a remote attacker to execute arbitrary code and gain control over the system.

Microsoft SharePoint software has vulnerabilities related to errors that occur during the processing of specially crafted files. Exploiting these vulnerabilities allows a malicious intruder to execute arbitrary code and gain full control over the system...

Dream Gallery 2.0 Authentication Bypass

======================================================================================================= Dream Gallery 2.0 Admin panel Authentication bypass Description : An Attackers are able to completely compromise the web application built upon Dream Gallery as they can gain access to the admi...