EUVD-2019-4729

Malware in sbrugna...

CVE-2019-13208

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

CVE-2012-4702

360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session...

maxx-bike-eldorado.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-904006 Security Researcher Implosion Helped patch 1643 vulnerabilities Received 7 Coordinated Disclosure badges Received 29 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting maxx-bike-eldorado.com...

Waves MAXX Audio WavesSysSvc64.exe Privilege Mobilization Vulnerability

Waves MAXX Audio is an intelligent audio output application.WavesSysSvc64.exe is a driver for Waves MAXX Audio. A security vulnerability exists in WavesSysSvc64.exe version 1.9.29.0 in Waves MAXX Audio. An attacker can exploit the vulnerability to elevate privileges...

CVE-2019-13208

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

CVE-2019-13208

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

Privilege escalation

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

CVE-2019-13208

WavesSysSvc in Waves MAXX Audio allows privilege escalation because the General registry key has Full Control access for the Users group, leading to DLL side loading. This affects WavesSysSvc64.exe 1.9.29.0...

CVE-2019-13208

The CVE-2019-13208 vulnerability affects Waves MAXX Audio: WavesSysSvc64.exe (v1.9.29.0) suffers privilege escalation due to DLL side loading caused by the General registry key granting Full Control to the Users group. This is a local escalation scenario with potential high impact as described in...

Waves Audio Service - Unquoted Service Path Privilege Escalation

Waves Audio Service: http://www.maxx.com By Ross Marks: http://www.rossmarks.co.uk Exploit-db: https://www.exploit-db.com/author/?a=8724 Category: Local Tested on: Windows 10 x86/x64 1 Unquoted Service Path Privilege Escalation Max audio drivers dell default ones installs as a service with an...

Joomla Component is 1.0.1 - Multiple Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Joomla Component is v 1.0.1 Multiple Remote SQL Injection variables vuln : marka & motor Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Mr.Al3FrItE & Islamic Security Team & Mounita20 & CoNaN and all musulmans hackers...

CVE-2012-4702

360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session...

Hardcoded credentials

360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session...

CVE-2012-4702

360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session...

CVE-2012-4702

CVE-2012-4702 affects 360 Systems image servers: Maxx, Image Server Maxx, and Image Server 2000. The root cause is a hardcoded password for the root account, enabling an attacker to log in via SSH and potentially execute arbitrary code or modify video content/scheduling. Affected devices include ...

Joomla Component is 1.0.1 Multiple Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Joomla Component is v 1.0.1 Multiple Remote SQL Injection variables vuln : marka & motor Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Mr.Al3FrItE & Islamic Security Team & Mounita20 & CoNaN and all musulmans hackers...

Joomla Component is 1.0.1 Multiple Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== Joomla Component is 1.0.1 Multiple Remote SQL Injection Exploit =============================================================== !/usr/bin/perl -w Joomla Component is v 1.0.1...

traceroute Local Root Exploit

No description provided by source. / MasterSecuritY www.mastersecurity.fr openwall.c - Local root exploit in LBNL traceroute Copyright C 2000 Michel "MaXX" Kaempf [email protected] Updated versions of this exploit and the corresponding advisory will be made available at:...