7326 matches found
Perl Local Elevation of Privilege Vulnerability
Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A security vulnerability exists in Perl. A local attacker can exploit this vulnerability by supplying specially crafted data to the XSLoader component to gain privileges on the target syst...
PT-2016-2502
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a lack of access control in a Windows kernel mode driver, which can be exploited by an attacker to elevate their privileges using a specially crafted application. This...
PT-2016-2461
Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-07-01 Description The issue is caused by multiple buffer overflows in libdex/OptInvocation.cpp in...
PT-2016-2467
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-01 Description The issue is related to errors in security label processing in the ChooserTarget service of the Android operating system. It allows a remote attacker to elevate their privileges using a speciall...
PT-2016-2448
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to insufficient access control in MediaTek drivers for the Android operating system. It allows a remote attacker to elevate their privileges using a specially crafted...
PT-2016-2449
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to insufficient access control in MediaTek drivers for the Android operating system. It allows a remote attacker to elevate their privileges using a specially crafted...
PT-2016-2439
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to errors in the code of the Qualcomm Wi-Fi driver in the Android operating system. It allows a remote attacker to elevate their privileges using a specially crafted...
Vulnerabilities in the Internet Explorer browser, which allow a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in Internet Explorer allow attackers to elevate their privileges level. By exploiting these vulnerabilities, attackers cannot execute arbitrary code, but they can use them to exploit other vulnerabilities with elevated privileges e.g., to execute arbitrary code...
Lenovo Solution Center Local Elevation of Privilege Vulnerability
Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. A local elevation of privilege vulnerability exists in versions prior to LSC 3.3.003. A local attacker...
Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities
Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SYMANTEC-SEPM-MULTIPLE-VULNS.txt + ISR: ApparitionSec Vendor: ================ www.symantec.com Product: =========== SEPM Symantec Endpoint Protection Manager and client v12.1...
Microsoft Windows - Custom Font Disable Policy Bypass
Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=779 Windows: Custom Font Disable Policy Bypass Platform: Windows 10 Only Class: Security Feature Bypass Summary: It’s possible to bypass the ProcessFontDisablePolicy check in win32...
Windows kernel mode drivers privilege elevation vulnerabilities MS16-062)
No description provided by source...
CVE-2016-3219
The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...
CVE-2016-3223: Undefined Security Weakness
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandle LDAP authentication, which allows man-in-the-middle attackers to gain privileges by modifying group-policy update da...
CVE-2016-3221: Undefined Security Weakness
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...
Microsoft Web Proxy Auto Discovery (WPAD) Privilege Elevation Vulnerabilities (3165191)
This host is missing an important security update according to Microsoft Bulletin MS16-077. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Kernel-Mode Drivers Privilege Elevation Vulnerabilities (3164028)
This host is missing an important security update according to Microsoft Bulletin MS16-073. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Oracle Outside in Libraries Elevation of Privilege Vulnerabilities
This security update addresses the following vulnerabilities, which are described in Oracle Critical Patch Update Advisory - January 2016: CVE-2015-6013: Oracle Outside In 8.5.2 WK4 stack buffer overflow CVE-2015-6014: Oracle Outside In 8.5.2 DOC stack buffer overflow CVE-2015-6015: Oracle OIT...
