Security Advisory - Unquoted Service Path Vulnerability in Huawei UTPS Software

Huawei Unified Terminal PC suite UTPS, also known as Mobile Partner, runs on the PC side to manage data cards. It provides data card setting, dial-up setting, message sending and receiving, and contacts management functions. Huawei UTPS has an unquoted service path vulnerability which can lead to...

Reason Core Security 1.1.2 Privilege Escalation Vulnerability

Reason Core Security version 1.1.2 suffers from an unquoted service path privilege escalation vulnerability. ===================================================== Exploit Title : Reason Core Security - Unquoted Service Path Privilege Escalation Affected Products: Reason Core Security v1.1.2 -...

Reason Core Security 1.1.2 Privilege Escalation

===================================================== Exploit Title : Reason Core Security - Unquoted Service Path Privilege Escalation Affected Products: Reason Core Security v1.1.2 - Software Exploitation Technique: Local Severity Level: Medium Tested OS : Windows 10...

Intel Identity Protection Technology Host Interface Service 1.2.22.0 Privilege Escalation Vulnerabil

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ============= www.intel.com Product: ======== Intel Identity Protection Technology Host Interface Service jhiservice.exe v1.2.22.0 Vulnerability Type: =================== Privilege Escalation Unquot...

Intel Management And Security LMS.exe 7.1.13.1088 Privilege Escalation Vulnerability

Intel Management and Security Application Local Management Service LMS.exe version 7.1.13.1088 suffers from a privilege escalation vulnerability. + Credits: John Page aka hyp3rlinx Vendor: ============= www.intel.com Product: =========== Intel Management and Security Application Local Management...

Nero 7.10.1.0 Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Nero 7 Unquoted Service Path Elevation Of Privilege Disclosure Date: 09/11/2016 Exploit Author: Boumediene KADDOUR a.k.a Sh311c0d3r http://www.realistic-security.org Version: Nero version 7.10.1.0 Tested on: Windows 7 integral...

Intel Management And Security LMS.exe 7.1.13.1088 Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/INTEL-LOCAL-MGTM-SERVICE-PRIVILEGE-ESCALATION.txt + ISR: ApparitionSec Vendor: ============= www.intel.com Product: =========== Intel Management and Security Application Local...

Samsung SW Update Service Privilege Escalation Vulnerability

Samsung Software Update Service, SWUpdateService SWMAgent.exe, installs as a service with an unquoted service path running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. Exploit...

Nero 7.10.1.0 Privilege Escalation

Exploit Title: Nero 7 Unquoted Service Path Elevation Of Privilege Disclosure Date: 09/11/2016 Exploit Author: Boumediene KADDOUR a.k.a Sh311c0d3r http://www.realistic-security.org Version: Nero version 7.10.1.0 Tested on: Windows 7 integral edition FR CVE : N/A Vulnerability Details:...

Samsung SW Update Service Privilege Escalation

Exploit Title: Samsung SW Update Service Unquoted Service Path Privilege Escalation Date: 04/10/2016 Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH && Superbug @xsuperbug Website: http://yildirimyunus.com Contact: [email protected] Category: local Vendor Homepage:...

Droid4X Privilege Escalation

Exploit Title: Droid4X Unquoted Service Path Privilege Escalation Date: 03/10/2016 Author: Yunus YILDIRIM Th3GundY Team: CT-Zer0 @CRYPTTECH && Superbug @xsuperbug Website: http://yildirimyunus.com Contact: [email protected] Category: local Vendor Homepage: http://www.droid4x.com/...

CVE-2016-5852

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...

CVE-2016-3161

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...

CVE-2016-3161

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...

Path traversal

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...

CVE-2016-3161

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...

CVE-2016-3161

CVE-2016-3161 affects NVIDIA Quadro/NVS/GeForce Windows drivers with GFE GameStream and NVTray Plugin unquoted service path, enabling code execution with SYSTEM/USER privileges on a vulnerable install. Root cause is an unquoted service path in the affected components; exploitation status is not d...

CVE-2016-5852

Summary: CVE-2016-5852 and related CVEs affect NVIDIA Quadro/NVS/GeForce Windows drivers (GFE GameStream/NVTray plugin and NVAPI/NVStreamKMS components). CVE-2016-5852 is an unquoted service path vulnerability in the NVTray Plugin that can be exploited locally via a malicious executable in the ro...

CVE-2016-5852

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...

Elevation of Privilege Vulnerability in Various Siemens Products (CNVD-2016-10732)

Founded in 1847, Siemens AG of Germany focuses on electrification, automation and digitalization. Siemens holds leading positions in offshore wind turbine construction, gas and steam turbine power generation, transmission solutions, infrastructure solutions, industrial automation, drives and...