CVE-2019-1086

An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1087, CVE-2019-1088...

CVE-2019-1010023

GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstrea...

Microsoft Windows 10.0.17134.648 HTTP -> SMB NTLM Reflection Leads to Privilege Elevation Exploit

Exploit for windows platform in category local exploits Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation Exploit VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is...

PT-2019-6313

Name of the Vulnerable Software and Affected Versions Citrix SD-WAN versions 10.2.x through 10.2.2 NetScaler SD-WAN versions 10.0.x through 10.0.7 Description The issue is related to improper input validation in the management interface component of NetScaler SD-WAN and Citrix SD-WAN, which can b...

Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation

Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is allowed to create TCP sockets. In particular, I was able to combi...

Microsoft Windows 10.0.17134.648 - HTTP -> SMB NTLM Reflection Leads to Privilege Elevation

VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is allowed to create TCP sockets. In particular, I was able to combine the issues mentioned below with a bug in Chromium to escape its sandbox. HTTP - SMB NTLM...

Intel Processor Diagnostic Tool elevation of privilege vulnerability (CNVD-2019-22204)

Intel Processor Diagnostic Tool IPDT is a processor function diagnostic tool from Intel USA. An elevation of privilege vulnerability exists in Intel IPDT versions prior to 4.1.2.24. An attacker can exploit this vulnerability to elevate privileges, disclose information, or cause a denial of servic...

PT-2019-5809

Name of the Vulnerable Software and Affected Versions Aviatrix VPN Client versions through 2.2.10 Description The issue is related to an authentication flaw in the AVPNC RP service, which can be exploited to gain elevated privileges through arbitrary code execution. This affects Windows, Linux, a...

Microsoft Windows Multiple Vulnerabilities (KB4507462)

This host is missing a critical security update according to Microsoft KB4480963 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

PT-2019-2731

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in privilege management within the Windows Audio service of the Windows operating system. It allows an attacker to execute arbitrary code with elevated privileg...

KB4507453: Windows 10 Version 1903 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507453. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who successfully exploited the vulnerabili...

PT-2019-2723

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service AppXSVC affected versions not specified Description The issue is related to the improper handling of hard links by the Windows AppX Deployment Service AppXSVC, which can lead to an elevation of privilege. This c...

PT-2019-4585

Name of the Vulnerable Software and Affected Versions SAP ERP HCM SAP HRCES version 3 Description The issue arises from insufficient authorization checks in a report that reads payroll data of employees in a certain area. This can lead to a situation where a user who once had authorization to...

AVTECH Software Room Alert 3E Elevation of Privilege Vulnerability

AVTECH Software Room Alert 3E is a device for monitoring the IT infrastructure environment from AVTECH Software, USA. The product is mainly used to monitor temperature, humidity, power, electricity and smoke in computer rooms or small data centers. A security vulnerability exists in AVTECH Softwa...

PT-2019-2762

Name of the Vulnerable Software and Affected Versions Azure Automation affected versions not specified Description The issue is related to insecure privilege management in Azure Automation on the Windows operating system. It allows a remote attacker to elevate their privileges. The vulnerability...

Microsoft Windows Elevation of Privilege (CVE-2019-1129)

...

KB4507457: Windows 8.1 and Windows Server 2012 R2 July 2019 Security Update (SWAPGS)

The remote Windows host is missing security update 4507457 or cumulative update 4507448. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An attacker who...

Akord-Win64 Privilege Bypass

The vulnerability of the information protection tool against unauthorized access, Akord-Win64, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass additional authentication procedures personal identifier. Upon successful authentication...

Google Android System Component Elevation of Privilege Vulnerability (CNVD-2019-21266)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android. An attacker can exploit this vulnerability to gain elevated privileges...

Google Android System Component Elevation of Privilege Vulnerability (CNVD-2019-21265)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android. An attacker can exploit this vulnerability to gain elevated privileges...