Moxa Active OPC Server Unquoted Service Path Escalation Vulnerability

OVERVIEW Independent researcher Zhou Yu has identified an unquoted service path escalation vulnerability in Moxa’s Active OPC Server application. Moxa has produced a new version to mitigate this vulnerability. Zhou Yu has tested the new version to validate that it resolves the vulnerability...

ACROS Security 0patch 2016.05.19.539 - (0PatchServicex64.exe) Unquoted Service Path Privilege Escala

Exploit for windows platform in category local exploits ACROS Security 0patch 0PatchServicex64.exe Unquoted Service Path Privilege Escalation Vendor: ACROS, d.o.o. Product web page: https://www.0patch.com Affected version: 2016.05.19.539 Summary: 0patch pronounced 'zero patch' is a platform for...

ACROS Security 0patch 2016.05.19.539 - '0PatchServicex64.exe' Unquoted Service Path Privilege Escalation

ACROS Security 0patch 0PatchServicex64.exe Unquoted Service Path Privilege Escalation Vendor: ACROS, d.o.o. Product web page: https://www.0patch.com Affected version: 2016.05.19.539 Summary: 0patch pronounced 'zero patch' is a platform for instantly distributing, applying and removing microscopic...

ACROS Security 0patch (0PatchServicex64.exe) Unquoted Service Path Privilege Escalation

Summary 0patch pronounced 'zero patch' is a platform for instantly distributing, applying and removing microscopic binary patches to/from running processes without having to restart these processes much less reboot the entire computer. Description The application suffers from an unquoted search...

ACROS Security 0patch 2016.05.19.539 Privilege Escalation

ACROS Security 0patch 0PatchServicex64.exe Unquoted Service Path Privilege Escalation Vendor: ACROS, d.o.o. Product web page: https://www.0patch.com Affected version: 2016.05.19.539 Summary: 0patch pronounced 'zero patch' is a platform for instantly distributing, applying and removing microscopic...

ACROS Security 0patch 2016.05.19.539 - 0PatchServicex64.exe Unquoted Service Path Privilege Escalation

ACROS Security 0patch 2016.05.19.539 - 0PatchServicex64.exe Unquoted Service Path Privilege Escalation ACROS Security 0patch 0PatchServicex64.exe Unquoted Service Path Privilege Escalation Vendor: ACROS, d.o.o. Product web page: https://www.0patch.com Affected version: 2016.05.19.539 Summary:...

Adobe Creative Cloud Desktop Application Unreferenced Service Path Enumeration Vulnerability

Adobe Creatie Cloud Desktop is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial photography and desig...

AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits ---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploit Author : Cyril...

AdobeUpdateService 3.6.0.248 Privilege Escalation

---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://www.adobe.com/fr/...

AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation

AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation ---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploi...

AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation

---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploit Author : Cyril Vallicari Vendor Homepage: http://www.adobe.com/fr/...

League of Legends Screensaver - Unquoted Service Path Privilege Escalation

Exploit Title: League of Legends Screensaver Unquoted Service Paths Conditional Privilege Escalation. CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage: http://www.leagueoflegends.com Software Link: screensaver.euw.leagueoflegends.com/enUS...

League of Legends Screensaver - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits...

League Of Legends Screensaver Unquoted Service Path Privilege Escalation

Exploit Title: League of Legends Screensaver Unquoted Service Paths Conditional Privilege Escalation. CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage: http://www.leagueoflegends.com Software Link: screensaver.euw.leagueoflegends.com/enUS...

League of Legends Screensaver - Unquoted Service Path Privilege Escalation

League of Legends Screensaver - Unquoted Service Path Privilege Escalation Exploit Title: League of Legends Screensaver Unquoted Service Paths Conditional Privilege Escalation. CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: [email protected] Vendor Homepage:...

Symantec Endpoint Encryption Unquoted Service Path Local Elevation of Privilege

SUMMARY Symantec Endpoint Encryption SEE has an unquoted search path in EEDService. This could provide a non-privileged local user the ability to successfully insert arbitrary code in the root path. AFFECTED PRODUCTS Symantec Endpoint Encryption --- CVE | Affected Versions | Remediation...

dbaudio R1 v2.14.4 DNS-SD Service Unquoted Service Path Privilege Escalation

Summary The R1 Remote control software succeeds the d&b ROPE C software. It is a software package designed to operate d&b amplifiers D12, D6, E-PAC with Display remotely using the d&b Remote network based on CAN-Bus technology. Description The application suffers from an unquoted search path issu...

Remote Command Execution Vulnerability in Service_path Parameter of Security Authentication Gateway of Shanghai Gale Software Co.

Gehl Secure Authentication Gateway is to provide digital certificate based authentication service, data link encryption service for network applications. A remote command execution vulnerability exists in the servicepath parameter in the /api/query.php?getaction=log page of the Secure...

GEOVAP Reliance 4 Control Server Privilege Escalation

GEOVAP Reliance 4 Control Server Unquoted Service Path Elevation Of Privilege Vendor: GEOVAP, spol. s r.o. Product web page: http://www.geovap.cz http://www.reliance.cz http://www.reliance-scada.com Affected version: 4.7.1 Revision 25172 Summary: Reliance is a professional SCADA/HMI system...

Circutor PowerStudio SCADA 4.0.5 Privilege Escalation

Circutor PowerStudio SCADA 4.0.5 Unquoted Service Path Elevation Of Privilege Vendor: CIRCUTOR SA Product web page: http:/www.circutor.com Affected version: PowerStudio SCADA 4.0.5 and OPC Server 1.4.1 Summary: CIRCUTOR's Electrical Energy Efficiency software e3 is currently called PowerStudio...