June 7, 2016, update for Office 2016 (KB3115189)

None None...

CVE-2016-4118

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors...

CVE-2016-4118

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors...

CVE-2016-4118: Undefined Security Weakness

Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors...

PT-2016-5850

Name of the Vulnerable Software and Affected Versions Adobe Connect Add-In versions prior to 11.9.976.291 Description The issue is related to an untrusted search path vulnerability in the installer. This could allow local users to gain privileges via unspecified vectors. Recommendations For Adobe...

CVE-2016-1742

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2016-1742

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2016-1742

CVE-2016-1742 concerns an untrusted search path vulnerability in the Apple iTunes installer prior to version 12.4. The issue allows local privilege escalation by placing a Trojan horse DLL in the current working directory, triggering code execution with the user’s privileges during installation. ...

CVE-2016-1742: Undefined Security Weakness

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

PT-2016-2076

Name of the Vulnerable Software and Affected Versions Apple iTunes versions prior to 12.4 Description The issue is related to an untrusted search path vulnerability in the installer. This vulnerability can be exploited by a local user to gain privileges via a Trojan horse DLL in the current worki...

WinRAR Elevation of Privilege Vulnerability

WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. An elevation of privilege vulnerability exists in WinRAR. Due to the executable installer, specifying "requireAdministrator" ...

FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation

Exploit for windows platform in category local exploits ----------------------------------- Exploit Title: Filezilla 3.17.0.0 windows installer Privileges Escalation via unquoted path vulnerability Date: 08/05/2016 Exploit Author: Cyril Vallicari Vendor Homepage: https://filezilla-project.org/...

FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation

FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation ----------------------------------- Exploit Title: Filezilla 3.17.0.0 windows installer Privileges Escalation via unquoted path vulnerability Date: 08/05/2016 Exploit Author: Cyril Vallicari Vendor Homepage:...

FileZilla FTP Client 3.17.0.0 - Unquoted Path Privilege Escalation

----------------------------------- Exploit Title: Filezilla 3.17.0.0 windows installer Privileges Escalation via unquoted path vulnerability Date: 08/05/2016 Exploit Author: Cyril Vallicari Vendor Homepage: https://filezilla-project.org/ Software Link:...

Microsoft Internet Explorer Add-on Installer Enhanced Protected Mode Information Disclosure Vulnerability

This vulnerability allows remote attackers to bypass the Enhanced Protected Mode sandbox of vulnerable installations of Microsoft Internet Explorer and disclose file contents. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

The vulnerability of the Solaris operating system, which allows a perpetrator to compromise its integrity

The vulnerability of the Solaris operating system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to influence the integrity of the system by affecting the sub-component called Automated Installer...

emblog file upload vulnerability

emlog is the short form of "Every Memory Log", meaning: a little bit of memory. It is a PHP language and MySQL database based on open source, free, powerful personal or multi-person co-authored blog system blog. PHP and MySQL-based powerful blog and CMS site-building system . A security...

May 3, 2016, update for InfoPath 2013 (KB3114946)

None None...

BlackArch Linux v2016.04.28 - Penetration Testing Distribution

BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers. The repository contains 1410 tools. You can install tools individually or in groups. BlackArch Linux is compatible with existing Arch installs. ChangeLog: added new improved BlackArch Linux...