Fitbit Connect Service Privilege Vulnerability

Fitbit Connect Service is a service for connecting hardware from Fitbit. An elevation of privilege vulnerability exists in Fitbit Connect Service, which stems from the default installation of Fitbit Connect Service with the service path without quotes and running with SYSTEM privileges, which...

ZendStudio IDE Privilege Vulnerability

Zend Studio is Zend Technologies developed PHP language integrated development environment Integrated Development Environment IDE, which combines PHP and mobile development , and includes some simple mobile application source code. An elevation of privilege vulnerability exists in ZendStudio IDE...

Elevation of Privilege Vulnerability in Multiple Pivotal Products

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.UAA /oauth/token endpoint is an identity management service endpoint of PCF. Elastic...

MariaDB Server 5.5.x < 5.5.51 Multiple Vulnerabilities

Binary data 9655.prm...

Netgear Genie 2.4.32 - Unquoted Service Path Elevation of Privilege Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Netgear Genie 2.4.32 Unquoted Service Path Elevation of Privilege Date: 30/09/2016 Exploit Author: Tulpa Contact: email protected Author website: www.tulpa-security.com Vendor Homepage: www.netgear.com Software Link:...

Oracle MySQL 5.5.x < 5.5.52 Multiple Vulnerabilities

Binary data 9610.prm...

Iperius Remote Server Path Elevation of Privilege Vulnerability

Iperius Backup is a database backup software. A server path elevation of privilege vulnerability exists in Iperius Remote 1.7.0. The vulnerability allows users to install system privileged services, which can be exploited to elevate privileges by executing arbitrary code on the local search path...

SolarWinds Kiwi Syslog Server Service Path Privilege Elevation Vulnerability

SolarWinds Kiwi Syslog Server is a syslog server for IT administrators and network teams. SolarWinds Kiwi Syslog Server has a security vulnerability. It allows a local user to elevate privileges on the system to execute arbitrary code...

CompuSource Systems Local Elevation of Privilege Vulnerability

CompuSource Systems is a CompuSource management system. A local elevation of privilege vulnerability exists in CompuSource Systems - Real Time Home Banking. An attacker could exploit this vulnerability to gain administrator privileges...

Kerberos in Microsoft Windows - Security Feature Bypass (MS16-101)

Exploit for windows platform in category local exploits Exploit Title: Kerberos Security Feature Bypass Vulnerability Kerberos to NTLM Fallback Date: 22-09-2016 Exploit Author: Nabeel Ahmed Tested on: Windows 7 Professional x32/x64 and Windows 10 x64 CVE : CVE-2016-3237 Category: Local Exploits &...

EMC Avamar Data Store and Avamar Virtual Edition Elevation of Privilege Vulnerability (CNVD-2016-07938)

EMC Avamar is a backup and recovery solution from EMC Corporation. The solution provides data backup, disaster recovery, deduplication, etc. Avamar Data Store ADS is one of the components used for data backup; Avamar Virtual Edition AVE is one of the components used to realize the replication...

CVE-2016-3306

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 mishandles session objects, which allows local users to hijack sessions, and consequently gain privileges...

Windows GDI Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...

KLA11907 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of...

Android debuggerd.cpp elevation of privilege vulnerability

Android is a mobile operating system based on the Linux open kernel, and Debuggerd is one of the system startup process components. An elevation of privilege vulnerability exists in the debuggerd/debuggerd.cpp file in Android Debuggerd, which stems from the program's failure to properly handle th...

Google Android Synaptics Touchscreen Driver Elevation of Privilege Vulnerability

Android on Nexus 5X and 9 is an open source Linux-based operating system for the Nexus 5X smartphone and 9 tablet developed by Google and the Open Handheld Alliance OHA.Synaptics touchscreen driver is one of the Synaptics touchscreen driver is one of the An elevation of privilege vulnerability...

CVE-2016-3874

CORE/HDD/src/wlanhddwext.c in the Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices does not properly validate the arguments array, which allows attackers to gain privileges via a crafted application that sends a WEUNITTESTCMD command, aka Android internal bug 29944562 and...

Return to libstagefright: exploiting libutils on Android

Posted by Mark Brand, Invalidator of Unic�o�d�e I’ve been investigating different fuzzing approaches on some Android devices recently, and this turned up the following rather interesting bug CVE 2016-3861 fixed in the most recent Android Security Bulletin, deep in the bowels of the usermode Andro...

ZKTeco ZKAccess Professional 3.5.3 Insecure File Permissions

i? ZKTeco ZKAccess Professional 3.5.3 Insecure File Permissions Vendor: ZKTeco Inc. | Xiamen ZKTeco Biometric Identification Technology Co.,ltd Product web page: http://www.zkteco.com Affected version: 3.5.3 Build 0005 Summary: ZKAccess 3.5 is a desktop software which is suitable for small and...

Dolby Audio X2 elevation of privilege vulnerability in multiple Lenovo products

An elevation of privilege vulnerability exists in multiple Lenovo products Dolby Audio X2. A local attacker can exploit the vulnerability to run files with system privileges...