MS16-034: Description of the security update for Windows kernel-mode drivers: March 8, 2016

None None...

Comodo Anti-Virus - SHFolder.dll Local Privilege Elevation Exploit

Exploit for windows platform in category local exploits SHFolder.DLL Local Privilege Elevation Exploit for Comodo Anti-Virus GeekBuddy Component by @LaughingMantis Greg Linares Since it took 146 days to fix a DLL Hijack issue I decided to drop this PoC: Technical Geeky Stuff GeekBuddy stores...

PT-2016-1175

Name of the Vulnerable Software and Affected Versions Secret Net and Secret Net Studio affected versions not specified Description The issue is related to a kernel driver vulnerability in the sncc0.sys driver, which is part of the Secret Net and Secret Net Studio information protection systems...

PT-2016-1591

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Snapshot versions 3.1 through 3.1.1.3 IBM Spectrum Protect Snapshot versions 3.2 through 3.2.0.6 IBM Spectrum Protect Snapshot versions 4.1 through 4.1.4 IBM Spectrum Protect for Virtual Environments versions 6.3 through...

Symantec Encryption Management Server Multiple Security Issues

SUMMARY The management console for Symantec Encryption Management Server SEMS is susceptible to potential OS command execution, local access elevation of privilege, a heap-based memory corruption resulting in a service crash and potential information disclosure of management console logon/account...

PT-2016-2698

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 11.x before 11.0 Build 64.34 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.5 before 10.5 Build 59.13 Citrix NetScaler...

VMware vCenter Server Patch Reissue

VMware on Saturday reissued a patch from October that incompletely addressed a critically rated remote code execution vulnerability in vCenter Server. The original vulnerability, CVE-2015-2342, was a poorly configured JMX RMI service in vCenter Server that was remotely accessible. The flaw allowe...

Citrix NetScaler Application Delivery Controller and NetScaler Gateway Multiple Security Updates (CTX206001)

A number of vulnerabilities have been identified in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that could allow a malicious, unprivileged user to perform privileged operations or execute commands. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions mig...

PT-2016-1364

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 9.1.20 PostgreSQL versions 9.2.x prior to 9.2.15 PostgreSQL versions 9.3.x prior to 9.3.11 PostgreSQL versions 9.4.x prior to 9.4.6 PostgreSQL versions 9.5.x prior to 9.5.1 Description The issue is related to...

CVE-2016-0040

CVE-2016-0040 is a Windows kernel privilege-escalation vulnerability (uninitialized-pointer issue) exploited locally on NT kernel surfaces. Public materials show a PoC/PoC-like exploit (MS16-014) overwriting kernel objects to gain SYSTEM/root privileges (e.g., ntoskrnl/Win32k surface). Exploit-DB...

CVE-2016-0051

The WebDAV client in multiple versions of Microsoft Windows (including Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8.1, Server 2012 Gold/R2, RT 8.1, and 10 Gold/1511) is vulnerable to a local privilege escalation vulnerability. The root cause stems from the program failing to properly validate inpu...

CVE-2016-0051: Undefined Security Weakness

The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "WebDAV Elevation of Privilege...

ZOHO ManageEngine EventLog Analyzer Elevation of Privilege Vulnerability

ZOHO ManageEngine EventLog Analyzer is a set of system, event log analysis software. A security vulnerability exists in ZOHO ManageEngine EventLog Analyzer that could be exploited by an attacker to elevate privileges and perform unauthorized operations...

PT-2016-1359

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android versions 5.x prior to 5.1.1 LMY49G Android versions 6.x before 2016-02-01 Description The issue is related to the Qualcomm Wi-Fi driver in the kernel, which has inadequate access control to certain...

Technical analysis: Apple syslogd to mention the right vulnerability, affecting numerous iOS and OSX version of the CVE-2 0 1 6-1 7 2 2-a vulnerability warning-the black bar safety net

! This iOS 9.2.1 the latest update, Apple fixes a code execution vulnerability, and is by Zimperium zLabs two fellows Nikias Bassen and Joshua J. Drake in syslogd in the discovery. In this article, we will share how to determine the vulnerability and the vulnerability behind can allow an attacker...

HP-UX PHNE_44296 : s700_800 11.23 cumulative PPP patch

s700800 11.23 cumulative PPP patch : A potential security vulnerability has been identified with the HP-UX pppoec utility. The vulnerability could be exploited in allowing a local user to elevate their privilege. References: CVE-2015-2126 SSRT102094. %NASLMINLEVEL 70300 C Tenable Network Security...

WiX Toolset DLL Hijacking

Hi @ll, executable installers ° created with the WiX Toolset see , and of course the WiX Toolset installer itself too resp. using its bootstrapper "burn.exe" are vulnerable: see 1. They load and execute a rogue/bogus/malicious FEClient.dll ' and other DLLs too, dependent on the version of Windows...

WEG SuperDrive G2 12.0.0 - Insecure File Permissions

WEG SuperDrive G2 v12.0.0 Insecure File Permissions Vendor: WEG Group Product web page: http://www.weg.net Affected version: SuperDrive G2 v12.0.0 Build 20150930-J1.8.060-NB8.0.2 SuperDrive v7.0.0 Summary: SuperDrive is a Windows graph tool for parameter setting, control and monitor of WEG...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2016-00254)

Microsoft Windows is a popular operating system. Microsoft Windows fails to properly load DLL files, allowing attackers to exploit the vulnerability to build special files that can be tricked into being parsed by users to elevate privileges...

Fortinet FortiClient Linux SSLVPN build elevation of privilege vulnerability

Fortinet FortiClient Linux SSLVPN is a Linux-based VPN client for connecting to Fortinet devices. An elevation of privilege vulnerability exists in versions prior to Fortinet FortiClient Linux SSLVPN build 2313, which allows local users to gain privileges via the assistant/sabloid etuid program...