1763 matches found
PT-2016-6902
Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 6.1.1 Description A vulnerability in the command-line interface CLI of IOS-XR series software could allow an authenticated, local attacker to execute arbitrary code on a targeted system at the root privilege level. The iss...
CVE-2016-0905
Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 allow local users to obtain root privileges by leveraging admin access and entering a sudo command...
USN-3081-1 tomcat6, tomcat7, tomcat8 vulnerability
Dawid Golunski discovered that the Tomcat init script incorrectly handled creating log files. A remote attacker could possibly use this issue to obtain root privileges. CVE-2016-1240 This update also reverts a change in behaviour introduced in USN-3024-1 by setting mapperContextRootRedirectEnable...
NetBSD mail.local Privilege Escalation
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'NetBSD mail.local Privilege Escalation', 'Description' = %q This module attempts to exploit a race condition in mail.local with...
NetBSD - 'mail.local(8)' Local Privilege Escalation (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'NetBSD mail.local Privilege Escalation', 'Description' = %q This module attempts to exploit a race condition in mail.local with...
Multiple Vulnerabilities Identified in 'Utterly Broken' BHU Routers
Researchers have identified a router so fraught with vulnerabilities and so “utterly broken” that it can be exploited to do pretty much anything. An attacker could bypass its authentication, peruse sensitive information stored in the router’s system logs and even use the device to execute OS...
NetBSD mail.local Privilege Escalation
This module attempts to exploit a race condition in mail.local with SUID bit set on: NetBSD 7.0 - 7.0.1 verified on 7.0.1 NetBSD 6.1 - 6.1.5 NetBSD 6.0 - 6.0.6 Successful exploitation relies on a crontab job with root privilege, which may take up to 10min to execute. Module Options msf use...
CVE-2016-5723
Huawei FusionInsight HD before V100R002C60SPC200 allows local users to gain root privileges via unspecified vectors...
CVE-2016-5723
Huawei FusionInsight HD before V100R002C60SPC200 allows local users to gain root privileges via unspecified vectors...
Security Advisory - Insufficient Input Validation Vulnerability in the FusionInsight
The FusionInsight has an insufficient input validation vulnerability. An attacker may exploit it to gain the root privilege of the Linux system where the software resides and control the operating system cluster. Vulnerability ID: HWPSIRT-2016-06010 This vulnerability has been assigned Common...
Kingsoft General System has ROOT privilege command execution vulnerability
Kingsoft is one of the Internet software companies. Kingsoft General System has a ROOT privilege command execution vulnerability. The vulnerability exists in the file: /src/system/dhcpdialog.php The main code can be seen here: $IGoperation = $POST'IGoperation'; $IGcardname = $POST'IGcard';...
Kingsoft KingGate Firewall suffers from roo privilege command execution vulnerability
KingGate Firewall is a firewall product. Kingsoft KingGate Firewall has a roo privilege command execution vulnerability. It allows attackers to exploit the vulnerability to gain server privileges...
LocalTapiola: Remote Code Execution in NovaStor NovaBACKUP DataCenter backup software (Hiback)
Issue This report contains information about a vulnerability in NovaStor NovaBACKUP DataCenter backup software. Fix There is no immediate fix. LähiTapiola has internal network controls in place for mitigation. Reasoning The report is partially out of scope as the software in question is not...
CVE-2016-1531
Exim before 4.86.2, when installed setuid root, allows local users to gain privileges via the perlstartup argument...
SUSE-SU-2016:0755-1 Security update for kernel live patch 1
This kernel live patch for Linux Kernel 3.12.51-60.20.2 fixes three security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962078. - CVE-2015-8660: The ovlsetattr function in fs/overlayfs/inode.c...
[SECURITY] [DSA 3517-1] exim4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3517-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 14, 2016 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3517-1] exim4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3517-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 14, 2016 https://www.debian.org/security/faq -...
DSA-3517-1 exim4 - security update
Bulletin has no description...
Deepin 15 lastore-daemon Privilege Escalation
!/usr/bin/env python encoding=utf8 Exploit Title: Lastore-daemon in Deepin 15 results in privilege escalation Date: 20160208 Exploit Author: King's Way Vendor Homepage: http://www.deepin.org Software Link: http://cdimage.linuxdeepin.com/releases/15.1/deepin-15.1-amd64.iso Version: Deepin 15 & 15....
Deepin Linux 15 - 'lastore-daemon' Local Privilege Escalation
!/usr/bin/env python encoding=utf8 Exploit Title: Lastore-daemon in Deepin 15 results in privilege escalation Date: 20160208 Exploit Author: King's Way Vendor Homepage: http://www.deepin.org Software Link: http://cdimage.linuxdeepin.com/releases/15.1/deepin-15.1-amd64.iso Version: Deepin 15 & 15....