9280 matches found
PT-2016-2076
Name of the Vulnerable Software and Affected Versions Apple iTunes versions prior to 12.4 Description The issue is related to an untrusted search path vulnerability in the installer. This vulnerability can be exploited by a local user to gain privileges via a Trojan horse DLL in the current worki...
WinRAR Elevation of Privilege Vulnerability
WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. An elevation of privilege vulnerability exists in WinRAR. Due to the executable installer, specifying "requireAdministrator" ...
FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation
Exploit for windows platform in category local exploits ----------------------------------- Exploit Title: Filezilla 3.17.0.0 windows installer Privileges Escalation via unquoted path vulnerability Date: 08/05/2016 Exploit Author: Cyril Vallicari Vendor Homepage: https://filezilla-project.org/...
FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation
FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation ----------------------------------- Exploit Title: Filezilla 3.17.0.0 windows installer Privileges Escalation via unquoted path vulnerability Date: 08/05/2016 Exploit Author: Cyril Vallicari Vendor Homepage:...
FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation
----------------------------------- Exploit Title: Filezilla 3.17.0.0 windows installer Privileges Escalation via unquoted path vulnerability Date: 08/05/2016 Exploit Author: Cyril Vallicari Vendor Homepage: https://filezilla-project.org/ Software Link:...
Microsoft Internet Explorer Add-on Installer Enhanced Protected Mode Information Disclosure Vulnerability
This vulnerability allows remote attackers to bypass the Enhanced Protected Mode sandbox of vulnerable installations of Microsoft Internet Explorer and disclose file contents. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...
The vulnerability of the Solaris operating system, which allows a perpetrator to compromise its integrity
The vulnerability of the Solaris operating system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to influence the integrity of the system by affecting the sub-component called Automated Installer...
emblog file upload vulnerability
emlog is the short form of "Every Memory Log", meaning: a little bit of memory. It is a PHP language and MySQL database based on open source, free, powerful personal or multi-person co-authored blog system blog. PHP and MySQL-based powerful blog and CMS site-building system . A security...
May 3, 2016, update for InfoPath 2013 (KB3114946)
None None...
BlackArch Linux v2016.04.28 - Penetration Testing Distribution
BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers. The repository contains 1410 tools. You can install tools individually or in groups. BlackArch Linux is compatible with existing Arch installs. ChangeLog: added new improved BlackArch Linux...
Mozilla Firefox / Thunderbird DLL Hijacking
Hi @ll despite better knowledge and MULTIPLE bug/vulnerability reports see , , , ... Mozilla continues to ship Firefox and Thunderbird for Windows with a vulnerable executable installer. Proof of concept/demonstration: 1. visit , download and save it as ShimEng.dll in your "Downloads" folder, the...
Unspecified Vulnerability in Oracle Sun Solaris Automated Installer Subcomponent
Oracle Sun Solaris is a set of Unix-like operating systems from Oracle. A security vulnerability in the Automated Installer subcomponent of Oracle Sun Solaris version 11.3 can be exploited by a remote attacker to update, insert, or delete data, compromising data integrity...
Threat Outbreak Alert RuleID22387: Email Messages Distributing Malicious Software on April 21, 2016
Medium Alert ID: 44756 First Published: 2016 April 21 14:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22387 may contain the following files: Name | Si...
CVE-2016-0623
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component...
CVE-2016-0623
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component...
Design/Logic Flaw
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component...
CVE-2016-0623
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component...
CVE-2016-0623
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component...
CVE-2016-0623
CVE-2016-0623 affects Oracle Solaris 11.3 Automated Installer subcomponent. The vulnerability allows remote attackers to affect integrity via network vectors; CVSS v3.0 base score 4.7 (I=Low, A=None) and CVSS v2 base score 4.3. No exploitation details are provided in the initial documents. Remedi...
PT-2016-1795
Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11.3 Description The issue is related to errors in the code of the Solaris operating system, specifically in the Automated Installer sub-component. This allows remote attackers to affect the integrity of the system...