Hide.Me VPN Client 1.2.4 - Privilege Escalation

Exploit for windows platform in category local exploits Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on:...

Hide.Me VPN Client 1.2.4 Privilege Escalation

Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on: Windows 7 x86, fully patched Release mode: no bugbounty...

InstantHMI 6.1 - Privilege Escalation

Exploit for windows platform in category local exploits Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows...

Python 3.5.2 DLL Hijacking

Aloha, python-3.5.2.exe loads and executes fwbase.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If an...

InstantHMI 6.1 Privilege Escalation

itle: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, fully patched Release mode: no bugbounty program,...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

A vulnerability that allows for increased privileges exists in the Windows installer. This vulnerability is related to incorrect restoration of previously installed applications. If this vulnerability is exploited successfully, a malicious individual will be able to execute arbitrary code at the...

CVE-2016-4157

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

CVE-2016-4157

Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...

June 7, 2016, update for Office 2016 (KB3115189)

None None...

CVE-2016-4118

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors...

CVE-2016-4118

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors...

CVE-2016-1742

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2016-1742

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2016-1742

CVE-2016-1742 concerns an untrusted search path vulnerability in the Apple iTunes installer prior to version 12.4. The issue allows local privilege escalation by placing a Trojan horse DLL in the current working directory, triggering code execution with the user’s privileges during installation. ...

WinRAR Elevation of Privilege Vulnerability

WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. An elevation of privilege vulnerability exists in WinRAR. Due to the executable installer, specifying "requireAdministrator" ...

FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation

Exploit for windows platform in category local exploits ----------------------------------- Exploit Title: Filezilla 3.17.0.0 windows installer Privileges Escalation via unquoted path vulnerability Date: 08/05/2016 Exploit Author: Cyril Vallicari Vendor Homepage: https://filezilla-project.org/...

FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation

FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation ----------------------------------- Exploit Title: Filezilla 3.17.0.0 windows installer Privileges Escalation via unquoted path vulnerability Date: 08/05/2016 Exploit Author: Cyril Vallicari Vendor Homepage:...

FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation

----------------------------------- Exploit Title: Filezilla 3.17.0.0 windows installer Privileges Escalation via unquoted path vulnerability Date: 08/05/2016 Exploit Author: Cyril Vallicari Vendor Homepage: https://filezilla-project.org/ Software Link:...

Microsoft Internet Explorer Add-on Installer Enhanced Protected Mode Information Disclosure Vulnerability

This vulnerability allows remote attackers to bypass the Enhanced Protected Mode sandbox of vulnerable installations of Microsoft Internet Explorer and disclose file contents. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...