Microsoft Windows SAM and LSAD Privilege Elevation Vulnerability (3148527)

This host is missing an important security update according to Microsoft Bulletin MS16-047 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Secondary Logon Privilege Elevation Vulnerability (3148538)

This host is missing an important security update according to Microsoft Bulletin MS16-046. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2016-1678

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in security settings, allowing a remote attacker to bypass the Same Origin Policy. It is an elevation of privilege vulnerability that occurs when Microso...

PT-2016-1700

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS Java affected versions not specified Description The issue is related to insufficient access control in the XML Data Archiving Service component of the SAP NetWeaver platform. This can be exploited by a remote attacker to obta...

Android Qualcomm Power Management Component Power Elevation Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm Power Management is a power management component developed by Qualcomm. An elevation of privilege vulnerability exists in the Qualcomm Power Management component in Android...

Android System Server Module Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System Server is a system server. An elevation of privilege vulnerability exists in the System Server module of Android. A local attacker can exploit this vulnerability t...

Microsoft Windows Privilege Elevation Vulnerability (CNVD-2016-01581)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows, which arises from a program's failure to properly clear handles in memory. An attacker could exploit the vulnerability to run arbitra...

CVE-2016-0087

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 do not properly validate handles, which allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."...

Microsoft Windows Privilege Elevation Vulnerability (3140410)

This host is missing an important security update according to Microsoft Bulletin MS16-031 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Kernel-Mode Drivers Privilege Elevation Vulnerabilities (3143145)

This host is missing an important security update according to Microsoft Bulletin MS16-034. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Secondary Logon Privilege Elevation Vulnerability (3143141)

This host is missing an important security update according to Microsoft Bulletin MS16-032. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft USB Mass Storage Class Driver Privilege Elevation Vulnerability (3143142)

This host is missing an important security update according to Microsoft Bulletin MS16-033 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-034: Description of the security update for Windows kernel-mode drivers: March 8, 2016

None None...

PT-2016-3132

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Description The issue is related to insufficient validation of handles in the Windows operating system. This could allow a...

Comodo Anti-Virus - SHFolder.dll Local Privilege Elevation Exploit

Exploit for windows platform in category local exploits SHFolder.DLL Local Privilege Elevation Exploit for Comodo Anti-Virus GeekBuddy Component by @LaughingMantis Greg Linares Since it took 146 days to fix a DLL Hijack issue I decided to drop this PoC: Technical Geeky Stuff GeekBuddy stores...

PT-2016-1175

Name of the Vulnerable Software and Affected Versions Secret Net and Secret Net Studio affected versions not specified Description The issue is related to a kernel driver vulnerability in the sncc0.sys driver, which is part of the Secret Net and Secret Net Studio information protection systems...

PT-2016-1591

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Snapshot versions 3.1 through 3.1.1.3 IBM Spectrum Protect Snapshot versions 3.2 through 3.2.0.6 IBM Spectrum Protect Snapshot versions 4.1 through 4.1.4 IBM Spectrum Protect for Virtual Environments versions 6.3 through...

Symantec Encryption Management Server Multiple Security Issues

SUMMARY The management console for Symantec Encryption Management Server SEMS is susceptible to potential OS command execution, local access elevation of privilege, a heap-based memory corruption resulting in a service crash and potential information disclosure of management console logon/account...

PT-2016-2698

Name of the Vulnerable Software and Affected Versions Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 11.x before 11.0 Build 64.34 Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway versions 10.5 before 10.5 Build 59.13 Citrix NetScaler...

VMware vCenter Server Patch Reissue

VMware on Saturday reissued a patch from October that incompletely addressed a critically rated remote code execution vulnerability in vCenter Server. The original vulnerability, CVE-2015-2342, was a poorly configured JMX RMI service in vCenter Server that was remotely accessible. The flaw allowe...