CVE-2024-27460

CVE-2024-27460 - Plantronics Desktop Hub LPE Arbitrary File Delete to SYSTEM. Majority of code is based on the referenced PoC by @filipdragovic. Thanks @filipdragovic & @k0zmer : Blog Post: https://mantodeasecurity.de/en/2024/05/cve-2024-27460-plantronics-hub-lpe References...

CVE-2024-27460

CVE-2024-27460 HP Plantronics Hub 3.25.1 Updater Privilege Escalation/Arbitrary File Read Description: HP Plantronics Hub 3.25.1 suffers from a bug that allows low privileged users to perform arbitrary file read as SYSTEM on the machine where the application is installed. Moreover, it is possible...

EUVD-2019-6677

Malware in sbrugna...

EUVD-2024-47291

Malicious code in bioql PyPI...

CVE-2024-27460

A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below...

CVE-2019-15742

A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application. A local attacker can exploit this issue to gain elevated privileges...

CVE-2024-6147

Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

CVE-2024-6147

Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

CVE-2024-6147

CVE-2024-6147 affects Poly Plantronics Hub, specifically the Spokes Update Service. A local attacker who can run low-privilege code can abuse symbolic links to delete files and escalate to SYSTEM, enabling arbitrary code execution. The available connected documents confirm local-privilege escalat...

CVE-2024-6147 Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability

Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

CVE-2024-6147 Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability

Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

CVE-2024-6147: Improper Link Resolution Before File Access

Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

Poly Plantronics Hub Security Vulnerability

The Poly Plantronics Hub is an audio communication device from Poly. A security vulnerability exists in Poly Plantronics Hub. An attacker could exploit the vulnerability to elevate privileges and execute arbitrary code in a SYSTEM environment...

(0Day) Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Poly Plantronics Hub. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Spokes Upda...

CVE-2024-27460

A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below...

CVE-2024-27460

A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below...

CVE-2024-27460: Incorrect Privilege Assignment

A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below...

Plantronics Hub 3.25.1 Arbitrary File Read

Exploit Title: Plantronics Hub 3.25.1 – Arbitrary File Read Date: 2024-05-10 Exploit Author: Farid Zerrouk from Deloitte Belgium, Alaa Kachouh from Mastercard Vendor Homepage: https://support.hp.com/us-en/document/ish9869257-9869285-16/hpsbpy03895 Version: Plantronics Hub for Windows version 3.25...

HP Plantronics Hub information leakage vulnerability

HP Plantronics Hub is a tool from Hewlett-Packard HP that provides management and control of Plantronics headsets and communication devices. A security vulnerability exists in HP Plantronics Hub version 3.25.1 and prior versions. An attacker could exploit the vulnerability to elevate privileges...

Plantronics Hub 3.25.1 - Arbitrary File Read Vulnerability

Exploit Title: Plantronics Hub 3.25.1 – Arbitrary File Read Date: 2024-05-10 Exploit Author: Farid Zerrouk from Deloitte Belgium, Alaa Kachouh from Mastercard Vendor Homepage: https://support.hp.com/us-en/document/ish9869257-9869285-16/hpsbpy03895 Version: Plantronics Hub for Windows version 3.25...