RGui 3.5.0 Buffer Overflow

!/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: RGui 3.5.0 - Local Buffer Overflow SEHDEP Bypass Date: 01-09-2018 Vulnerable Software: RGui 3.5.0 Vendor Homepage: https://www.r-project.org/ Version: 3.5.0 Software Link:...

PT-2019-1734

Name of the Vulnerable Software and Affected Versions IntelR System Support Utility for Windows versions prior to 2.5.0.15 Description The issue is related to insufficient path checking, which may allow an authenticated user to potentially enable an escalation of privilege via local access. It is...

PT-2019-8874

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software versions prior to 20.90.0.7 Description The issue is related to improper directory permissions in the ZeroConfig service, which may allow an authorized user to potentially enable escalation of privilege via...

CVE-2017-3718: Undefined Security Weakness

Improper setting of device configuration in system firmware for IntelR NUC kits may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2018-12166: Improper Input Validation

Insufficient write protection in firmware for IntelR OptaneTM SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2018-3703: Incorrect Permission Assignment for Critical Resource

Improper directory permissions in the installer for the IntelR SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access...

PT-2019-8873

Name of the Vulnerable Software and Affected Versions IntelR OptaneTM SSD DC P4800X versions prior to E2010435 Description The issue concerns the firmware update routine in the bootloader, which may allow a privileged user to potentially enable a denial of service via local access. Recommendation...

CVE-2018-12167: Improper Input Validation

Firmware update routine in bootloader for IntelR OptaneTM SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access...

PT-2019-8872

Name of the Vulnerable Software and Affected Versions IntelR OptaneTM SSD DC P4800X versions prior to E2010435 Description The issue is related to insufficient write protection in the firmware, which may allow a privileged user to potentially enable a denial of service via local access...

January 2019 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB 4481490)

January 2019 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 8.1, RT 8.1, and Server 2012 R2 KB 4481490 Applies to: Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framewo...

PT-2019-9554

Name of the Vulnerable Software and Affected Versions IntelR SGX SDK and Platform Software for Windows versions prior to 2.2.100 Description The issue is related to improper file verification in the install routine, which may allow an escalation of privilege via local access. Recommendations For...

RGui 3.5.0 - Local Buffer Overflow (SEH)(DEP Bypass)

!/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: RGui 3.5.0 - Local Buffer Overflow SEHDEP Bypass Date: 01-09-2018 Vulnerable Software: RGui 3.5.0 Vendor Homepage: https://www.r-project.org/ Version: 3.5.0 Software Link:...

PT-2019-6382

Name of the Vulnerable Software and Affected Versions IntelR NUC kits affected versions not specified Description The issue is related to improper setting of device configuration in system firmware, which may allow a privileged user to potentially enable escalation of privilege via physical acces...

CVE-2018-20306

A stored cross-site scripting XSS vulnerability in the web administration user interface of Pulse Secure Virtual Traffic Manager may allow a remote authenticated attacker to inject web script or HTML via a crafted website and steal sensitive data and credentials. Affected releases are Pulse Secur...

IBM SVC or IBM Storwize storage LUN can be deleted under specific circumstances

Challenge | Newly created LUNs on IBM storages that utilize the Spectrum Virtualize Software with Veeam B&RIBM SVC or IBM FlashSystem, under very specific circumstances, can be deleted by Veeam B&R. --- Cause | Spectrum Virtualize software has the ability to reuse LUN IDs, which are not set to be...

PT-2018-15393

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 3.1.1 Description The issue allows attackers to cause a denial-of-service, resulting in an application crash due to an out-of-bounds read, by crafting a specific input file. This is related to the r bin dyldcache...

PT-2018-16133

Name of the Vulnerable Software and Affected Versions IntelR System Defense Utility all versions Description The issue is related to improper directory permissions in the installer, which may allow authenticated users to potentially enable a denial of service via local access. Recommendations For...

CVE-2018-3705: Incorrect Permission Assignment for Critical Resource

Improper directory permissions in the installer for the IntelR System Defense Utility all versions may allow authenticated users to potentially enable a denial of service via local access...

Digital Arts i-FILTER Cross-Site Scripting Vulnerability

Digital Arts i-FILTER is a server-based Web filtering software from Digital Arts Japan. The software is mainly used to monitor Web access and protect outbound and inbound traffic. A cross-site scripting vulnerability exists in Digital Arts i-FILTER 9.50R05 and earlier versions. A remote attacker...

Pulse Secure Desktop Client for Windows Arbitrary File Write Vulnerability

Pulse Secure Desktop Client for Windows is a suite of Windows-based client software from Pulse Secure, Inc. for end devices that access Juniper Pulse Secure gateways. A security vulnerability exists in Pulse Secure Desktop Client versions 5.3 through R6.0 build 1769 for Windows-based platforms. T...