Hide.Me VPN Client 1.2.4 Privilege Escalation

Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on: Windows 7 x86, fully patched Release mode: no bugbounty...

InstantHMI 6.1 - Local Privilege Escalation

Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, fully patched Release mode: no bugbounty program...

InstantHMI 6.1 Privilege Escalation

itle: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, fully patched Release mode: no bugbounty program,...

Python 3.5.2 DLL Hijacking

Aloha, python-3.5.2.exe loads and executes fwbase.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If an...

InstantHMI 6.1 - Privilege Escalation

Exploit for windows platform in category local exploits Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

A vulnerability that allows for increased privileges exists in the Windows installer. This vulnerability is related to incorrect restoration of previously installed applications. If this vulnerability is exploited successfully, a malicious individual will be able to execute arbitrary code at the...

CVE-2016-4157

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

CVE-2016-4157

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

PT-2016-5853

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 3.7.0.272 Description The issue is related to an untrusted search path vulnerability in the installer of the Adobe Creative Cloud Desktop Application. This vulnerability allows local...

CVE-2016-4157: Undefined Security Weakness

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

June 7, 2016, update for Office 2016 (KB3115189)

None None...

CVE-2016-4118

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors...

CVE-2016-4118

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors...

CVE-2016-4118: Undefined Security Weakness

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors...

PT-2016-5850

Name of the Vulnerable Software and Affected Versions Adobe Connect Add-In versions prior to 11.9.976.291 Description The issue is related to an untrusted search path vulnerability in the installer. This could allow local users to gain privileges via unspecified vectors. Recommendations For Adobe...

CVE-2016-1742

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2016-1742

CVE-2016-1742 concerns an untrusted search path vulnerability in the Apple iTunes installer prior to version 12.4. The issue allows local privilege escalation by placing a Trojan horse DLL in the current working directory, triggering code execution with the user’s privileges during installation. ...

CVE-2016-1742

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2016-1742: Undefined Security Weakness

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...