CVE-2016-0073

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of...

CVE-2016-7188

The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

CVE-2016-3376: Improper Privilege Management

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (3192892)

This host is missing an important security update according to Microsoft Bulletin MS16-123. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Diagnostics Hub Privilege Elevation Vulnerability (3193229)

This host is missing an important security update according to Microsoft Bulletin MS16-125. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016

None None...

MS16-124: Description of the security update for Windows registry: October 11, 2016

None None...

PT-2016-2978

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control to certain functions in the Windows operating system kernel drivers. It allows a remote attacker to potentially elevate their privileges...

CVE-2016-3936

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019037 and MediaTek internal bug ALPS02829568...

ZendStudio IDE Privilege Vulnerability

Zend Studio is Zend Technologies developed PHP language integrated development environment Integrated Development Environment IDE, which combines PHP and mobile development , and includes some simple mobile application source code. An elevation of privilege vulnerability exists in ZendStudio IDE...

Fitbit Connect Service Privilege Vulnerability

Fitbit Connect Service is a service for connecting hardware from Fitbit. An elevation of privilege vulnerability exists in Fitbit Connect Service, which stems from the default installation of Fitbit Connect Service with the service path without quotes and running with SYSTEM privileges, which...

Elevation of Privilege Vulnerability in Multiple Pivotal Products

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.UAA /oauth/token endpoint is an identity management service endpoint of PCF. Elastic...

MariaDB Server 5.5.x < 5.5.51 Multiple Vulnerabilities

Binary data 9655.prm...

Netgear Genie 2.4.32 - Unquoted Service Path Elevation of Privilege Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Netgear Genie 2.4.32 Unquoted Service Path Elevation of Privilege Date: 30/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: www.netgear.com Software Link:...

Oracle MySQL 5.5.x < 5.5.52 Multiple Vulnerabilities

Binary data 9610.prm...

Iperius Remote Server Path Elevation of Privilege Vulnerability

Iperius Backup is a database backup software. A server path elevation of privilege vulnerability exists in Iperius Remote 1.7.0. The vulnerability allows users to install system privileged services, which can be exploited to elevate privileges by executing arbitrary code on the local search path...

SolarWinds Kiwi Syslog Server Service Path Privilege Elevation Vulnerability

SolarWinds Kiwi Syslog Server is a syslog server for IT administrators and network teams. SolarWinds Kiwi Syslog Server has a security vulnerability. It allows a local user to elevate privileges on the system to execute arbitrary code...

CompuSource Systems Local Elevation of Privilege Vulnerability

CompuSource Systems is a CompuSource management system. A local elevation of privilege vulnerability exists in CompuSource Systems - Real Time Home Banking. An attacker could exploit this vulnerability to gain administrator privileges...

Kerberos in Microsoft Windows - Security Feature Bypass (MS16-101)

Exploit for windows platform in category local exploits Exploit Title: Kerberos Security Feature Bypass Vulnerability Kerberos to NTLM Fallback Date: 22-09-2016 Exploit Author: Nabeel Ahmed Tested on: Windows 7 Professional x32/x64 and Windows 10 x64 CVE : CVE-2016-3237 Category: Local Exploits &...

EMC Avamar Data Store and Avamar Virtual Edition Elevation of Privilege Vulnerability (CNVD-2016-07938)

EMC Avamar is a backup and recovery solution from EMC Corporation. The solution provides data backup, disaster recovery, deduplication, etc. Avamar Data Store ADS is one of the components used for data backup; Avamar Virtual Edition AVE is one of the components used to realize the replication...