MailEnable Local Privilege Escalation

Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MAILENABLE-MULTIPLE-PRIVILEGE-ESCALATIONS.txt + ISR: ApparitionSec Vendor: =================== www.mailenable.com Products: ============ MailEnable MailEnable provides Windows...

MailEnable Multiple Local Privilege Escalations Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MAILENABLE-MULTIPLE-PRIVILEGE-ESCALATIONS.txt + ISR: ApparitionSec Vendor: =================== www.mailenable.com...

CVE-2016-8225

Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges...

Design/Logic Flaw

Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges...

CVE-2016-8225

The CVE-2016-8225 entry concerns Lenovo Edge USB Keyboard Driver (also called Lenovo Slim USB Keyboard/Low Profile Keyboard) on Windows. The advisory LEN-11588 indicates a local privilege escalation vulnerability when the driver is prior to version 1.21. The root issue is exposed as a local explo...

CVE-2016-8225

Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges...

CVE-2016-8225: Unquoted Search Path or Element

Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges...

PT-2017-9540

Name of the Vulnerable Software and Affected Versions Lenovo Edge and Lenovo Slim USB Keyboard Driver versions prior to 1.21 Description The issue allows local users to execute code with elevated privileges due to an unquoted service path vulnerability. Recommendations For versions prior to 1.21,...

Reason Core Security Elevation of Privilege Vulnerability

Reason Core Security is an antivirus security product that also detects system security and removes malware and adware. An elevation of privilege vulnerability exists in version 1.1.2.0 of Reason Core Security. The vulnerability stems from the fact that the program is installed by default with th...

Orthanc DICOM Server 1.1.0 Unquoted Service Path Privilege Escalation

Orthanc DICOM Server 1.1.0 Unquoted Service Path Privilege Escalation Vendor: SAcbastien Jodogne Product web page: http://www.orthanc-server.com Affected version: 1.1.0 Summary: Orthanc is a Belgian, open-source, lightweight RESTful DICOM server for healthcare and medical research with an...

Orthanc DICOM Server 1.1.0 Unquoted Service Path Privilege Escalation

Summary Orthanc is a Belgian, open-source, lightweight RESTful DICOM server for healthcare and medical research with an ubiquitous web interface that enables you to upload, receive and transfer DICOM images. It comes with a REST API to automate imaging flows and an SDK to integrate with native...

Siemens SINEMA Server < 13 SP2 Unquoted Service Path Local Privilege Escalation (SSA-701708)

Binary data scadasiemenssinemaserverSSA-701708.nbin...

Siemens SIMATIC WinCC (TIA Portal) < 14 Unquoted Service Path Local Privilege Escalation (SSA-701708)

Binary data scadasiemenstiawinccSSA-701708.nbin...

Siemens SIMATIC STEP 7 (TIA Portal) < 14 Unquoted Service Path Local Privilege Escalation (SSA-701708)

Binary data scadasiemenstiastep7SSA-701708.nbin...

CVE-2016-8102

Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch processes with elevated privileges...

CVE-2016-8102

CVE-2016-8102 is an Unquoted service path vulnerability in Intel Wireless Bluetooth Driver packages (16.x, 17.x, and before 18.1.1607.3129) that allows a local attacker with elevated privileges to cause code execution when the driver loads. The root cause is an unquoted service path, enabling a l...

PT-2016-7465

Name of the Vulnerable Software and Affected Versions Intel Wireless Bluetooth Drivers versions 16.x through 17.x Intel Wireless Bluetooth Drivers versions prior to 18.1.1607.3129 Description The issue allows local users to launch processes with elevated privileges due to an unquoted service path...

CVE-2016-8102: Undefined Security Weakness

Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch processes with elevated privileges...

Intel® Wireless Bluetooth® Driver Unquoted Service Path

Summary: There is a security vulnerability in the Intel® Wireless Bluetooth® drivers 16.x/17.x and all 18.x versions prior to 18.1.1607.3129 02/26/2016 known as an “Unquoted Service Path”. All drivers posted with version 18.1.1607.3129 and above due not contain the disclosed vulnerability...

Huawei UTPS UTPS-V200R003B015D16SPC00C983 Privilege Escalation

Exploit Title: Unquoted Service Path Vulnerability in Huawei UTPS Software Date: Nov 16 2016 Author: Dhruv Shah @Snypter Website: http://security-geek.in Contact: [email protected] Category: local Vendor Homepage: http://www.huawei.com/ Version: Versions earlier than UTPS-V200R003B015D16SPC00C9...