190 matches found
Information disclosure
Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM...
CVE-2019-15084
Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM...
CVE-2019-15084
Realtek Waves MaxxAudio driver 1.6.2.0 (Dell laptops) has incorrect file permissions in its service binary (WavesSysSvc64.exe), enabling local privilege escalation to SYSTEM. Documents cite a local exploit (PoC/analysis) and Dell PSIRT guidance to update to a supported driver; no official patch d...
Realtek Waves MaxxAudio driver elevation of privilege vulnerability
Realtek Waves MaxxAudio driver is an audio driver. An elevation of privilege vulnerability exists in Realtek Waves MaxxAudio driver version 1.6.2.0 for Dell laptops, which can be exploited by a local attacker to elevate privileges to SYSTEM...
Personal Data Left on Used Laptops
A recent experiment found all sorts of personal data left on used laptops and smartphones. This should come as no surprise. Simson Garfinkel performed the same experiment in 2003, with similar results...
New found thunderclap vulnerability allows hackers to use a Thunderbolt/USB-C peripheral attack PC-vulnerability warning-the black bar safety net
Earlier by the Cambridge University computer science and Technology Department, Rice University, and Stanford Institute of International Studies a group of researchers announced a new vulnerability Thunderclap, affecting all major platforms, including MacOS and Windows. The vulnerability affects...
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 - Local Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits Exploit Title: MaxxAudio Drivers WavesSysSvc64.exe File Permissions SYSTEM Privilege Escalation Exploit Author: Mike Siegel @mlsiegel Vendor Homepage: https://maxx.com Software Link: Version: 1.6.2.0 May affect other versions Tested on: Win ...
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 - Local Privilege Escalation
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 - Local Privilege Escalation Exploit Title: MaxxAudio Drivers WavesSysSvc64.exe File Permissions SYSTEM Privilege Escalation Google Dork: Date: 2/18/2019 Exploit Author: Mike Siegel @mlsiegel Vendor Homepage: https://maxx.com Software Link: Version:...
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 Privilege Escalation
Exploit Title: MaxxAudio Drivers WavesSysSvc64.exe File Permissions SYSTEM Privilege Escalation Google Dork: Date: 2/18/2019 Exploit Author: Mike Siegel @mlsiegel Vendor Homepage: https://maxx.com Software Link: Version: 1.6.2.0 May affect other versions Tested on: Win 10 64 bit CVE : None...
MaxxAudio Drivers WavesSysSvc64.exe 1.6.2.0 - Local Privilege Escalation
Exploit Title: MaxxAudio Drivers WavesSysSvc64.exe File Permissions SYSTEM Privilege Escalation Google Dork: Date: 2/18/2019 Exploit Author: Mike Siegel @mlsiegel Vendor Homepage: https://maxx.com Software Link: Version: 1.6.2.0 May affect other versions Tested on: Win 10 64 bit CVE :...
Lenovo to pay $7.3m for installing adware in 750,000 laptops
By Waqas In 2015, Beijing based laptop manufacturer and seemingly reliable technology company Lenovo made headlines that its 750,000 laptops had pre-installed adware called VisualDiscovery developed by Superfish. The adware played a vital role in compromising online security protections installed...
uae.sharafdg.com XSS vulnerability
Open Bug Bounty ID: OBB-571823 Description| Value ---|--- Affected Website:| uae.sharafdg.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Lenovo Fixes Hardcoded Password Flaw Impacting ThinkPad Fingerprint Scanners
PC maker Lenovo issued a fix for a hardcoded password flaw impacting ThinkPad, ThinkCentre and ThinkStation laptops. The flaw affects nearly a dozen Lenovo laptop models that run versions of Microsoft Windows 7, 8 and the 8.1 operating system. The vulnerability was disclosed by Lenovo on Thursday...
Critical Intel AMT Flaw Lets Attackers Hack Laptops in Mere Seconds
By Waqas It has been a matter of days when we found This is a post from HackRead.com Read the original post: Critical Intel AMT Flaw Lets Attackers Hack Laptops in Mere Seconds...
New Intel AMT Security Issue Lets Hackers Gain Full Control of Laptops in 30 Seconds
It's been a terrible new-year-starting for Intel. Researchers warn of a new attack which can be carried out in less than 30 seconds and potentially affects millions of laptops globally. As Intel was rushing to roll out patches for Meltdown and Spectre vulnerabilities, security researchers have...
pricebaba.com XSS vulnerability
Vulnerable URL: https://pricebaba.com/laptop/pricelist/hp-laptops?description=...
HP Silently Installs Telemetry Bloatware On Your PC—Here's How to Remove It
Do you own a Hewlett-Packard HP Windows PC or laptop? Multiple HP customers from around the world are reporting that HP has started deploying a "spyware" onto their laptops—without informing them or asking their permission. The application being branded as spyware is actually a Windows Telemetry...
Local Elevation of Privilege Vulnerability in Multiple Lenovo ThinkPad Products
ThinkPad 11e and others are laptop products from the Chinese company Lenovo.Realtek audio driver is one of the audio drivers released by Realtek. A local elevation of privilege vulnerability exists in the Realtek audio driver in several Lenovo ThinkPad products. A local attacker could exploit thi...
CVE-2017-15366
Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...
CyberLink LabelPrint < 2.5 - Buffer Overflow (SEH Unicode) Exploit
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: CyberLink LabelPrint =2.5 File Project Processing Unicode Stack Overflow Date: September 23, 2017 Exploit Author: f3ci Vendor Homepage: https://www.cyberlink.com/ Software Link:...