Microsoft Windows 10 1903/1809 RPCSS Activation Kernel Security Callback Privilege Escalation

Exploit for windows platform in category local exploits Microsoft Windows 10 1903/1809 - RPCSS Activation Kernel Security Callback Privilege Escalation Windows: RPCSS Activation Kernel Security Callback EoP Platform: Windows 10 1903/1809 not tested earlier Class: Elevation of Privilege Security...

System.Management.Automation subject to bypass via script debugging

Microsoft Security Advisory CVE-2019-1167: Windows Defender Application Control Security Feature Bypass Vulnerability Microsoft Security Advisory CVE-2019-1167: Windows Defender Application Control Security Feature Bypass Vulnerability Executive Summary A security feature bypass vulnerability...

Moodle Security Bypass Vulnerability (CNVD-2019-24402)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security bypass vulnerability exists in Moodle, which can be exploited by attackers to bypass security restrictions and perform...

Moodle Security Bypass Vulnerability (CNVD-2019-24403)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security bypass vulnerability exists in Moodle, which can be exploited by attackers to bypass security restrictions and perform...

KLA11519 Multiple vulnerabilities in LibreOffice

Multiple vulnerabilities were found in LibreOffice. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An improper script handling issue can be exploited remotely via a specially crafted file t...

EDK2 Security Bypass Vulnerability

EDK2 is a set of cross-platform firmware development environment based on UEFI and PI specifications. A security bypass vulnerability exists in EDK2. A remote attacker could exploit this vulnerability to cause an affected application to crash, resulting in a denial of service or bypass security...

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2019-22851)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 68 and...

Open-source Ticket Request System Help Desk Privilege Vulnerability

Open-source Ticket Request System OTRS is an open-source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the...

EDK2 Remote Buffer Overflow Vulnerability

EDK2 is a set of cross-platform firmware development environment based on UEFI and PI specifications. A buffer overflow vulnerability exists in EDK2. A remote attacker could exploit this vulnerability to bypass security restrictions, perform unauthorized operations or cause a denial of service...

KLA11521 Multiple vulnerabilities in Oracle VirtualBox

Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities in Core component of Oracle VM VirtualBox can be...

Philips Holter 2010 Plus Access Control Error Vulnerability

Philips Holter 2010 Plus is a suite of ambulatory ECG monitoring software from Philips Europe. A security bypass vulnerability exists in Philips Holter 2010 Plus all versions. A local attacker can exploit this vulnerability to bypass security restrictions and gain unauthorized access to disabled...

KLA11799 Security vulnerability in Zoom

Security vulnerability was found in Zoom. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories Zoom Security CVE-2019-13450 CVE-2019-13450 Exploitation Malware exists for this vulnerability. Usually such malware is...

Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability

According to its self-reported version, the Cisco NX-OS Software in ACI mode is affected by a security bypass vulnerability. An unauthenticated, adjacent attacker could exploit this vulnerability to connect an unauthorized server to the highly privileged infrastructure VLAN. Please see the includ...

Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation

Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is allowed to create TCP sockets. In particular, I was able to combi...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2019-22628)

Mozilla Firefox is a product of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox, which could be exploited by an attacker to bypass...

The vulnerability of Microsoft Edge’s Mark of the Web Tagging (MOTW) mechanism allows attackers to circumvent existing security restrictions and compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Mark of the Web Tagging MOTW mechanism in Microsoft Edge browser relates to bypassing security features. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and compromise the confidentiality, integrity, and accessibility of...

CVE-2019-13337

WESEEK GROWI prior to 3.5.0 is affected. A flaw in site-wide basic authentication allows bypass by supplying the URL parameter access_token (the API parameter). No valid token is validated by the backend, enabling the website to be browsed as if authentication were not required. The core issue is...

KLA11516 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, perform cross-site scripting attack, spoof user interface, obtain sensitive information, execute arbitrary code. Below is a...

Microsoft Windows ADFS CVE-2019-0975 Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows Server 1803 Microsoft Windows Server 1903 Microsoft Windows Server 2016...

KLA11513 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security...