JVN#93699304: Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries

PhishWall Client Internet Explorer version, provided by SecureBrain Corporation, is an anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer version contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427...

Arbitrary code execution vulnerability in Shield Spirit public number promotion system setup.php page

Shield Spirit Public Promotion System is a product that is mainly applied to public promotion alliance. An arbitrary code execution vulnerability exists in the setup.php page of the Shield Spirit Public Promotion System. Allow attackers to exploit the vulnerability to directly execute code...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System vip.php Page

Shield Spirit Public Promotion System is a product that is mainly applied to public promotion alliance. A SQL injection vulnerability exists in the vip.php page of Shield Spirit Public Number Promotion System. Allow attackers to exploit the vulnerability to obtain sensitive database information...

Information Disclosure Through Logs

logstash-core is vulnerable to information disclosure. The vulnerability is possible because it logs information from HTTP authorization headers which could contain sensitive information. Users who use secure communication from logstash to elasticsearch via basic authorization using elastic shiel...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System reg.php Page

Shield Spirit Public Promotion System is a product that is mainly applied to public promotion alliance. A SQL injection vulnerability exists in the username parameter of the Shield Spirit public number promotion system \php\reg.php page. An attacker can exploit the vulnerability to obtain sensiti...

Shield Spirit Public Promotion System setup.php has a reinstallation vulnerability

Shield Spirit public number promotion system is mainly applied to public number promotion affiliate. A reinstallation vulnerability exists in Shield Spirit Public Promotion System setup.php. As the program fails to validate the installation, an attacker can reinstall the system by exploiting the...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System Login.php

Shield Spirit public number promotion system is mainly applied to public number promotion affiliate. A SQL injection vulnerability exists in the login.php of the Shield Spirit public number promotion system. Since the username variable in the statement gets data directly from post, it allows...

Security Bulletin: NVIDIA SHIELD Contains Multiple Vulnerabilities in nvhost_job.c

Vulnerability Details CVE-2016-6915 NVIDIA nvhostjob.c contains a vulnerability in the stack buffer overflow, leading to a system crash Android Security Bulletin – December 2016 CVSS Base Score: 8.4 CVSS Temporal Score: 7.6 CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C...

Authentication Bypass Vulnerability in Shield Spirit Public Promotion System check.php

Shield Spirit public number promotion system is mainly applied to public number promotion affiliate. An authentication bypass vulnerability exists in the Shield Spirit Public Number Promotion System check.php. It allows an attacker to gain unauthorized access to the system's administration page t...

CVE-2016-6916

Integer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5 allows local users to cause a denial of service system crash via unspecified vectors, which triggers a buffer overflow...

CVE-2016-6917

Buffer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5...

CVE-2016-6915

Stack-based buffer overflow in nvhostjob.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5...

Hotspot Shield 6.0.3 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Hotspot Shield Unquoted Service Path Privilege Escalation Date: 13/10/2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com Software Link: https://www.hotspotshield.com/download/ version : 6.0.3 Latest Tested on...

Hotspot Shield 6.0.3 Privilege Escalation

Exploit Title: Hotspot Shield Unquoted Service Path Privilege Escalation Date: 13/10/2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com Software Link: https://www.hotspotshield.com/download/ version : 6.0.3 Latest Tested on: Windows 7 Hotspot Shield installs as a service with an...

Hotspot Shield 6.0.3 - Unquoted Service Path Privilege Escalation

Hotspot Shield 6.0.3 - Unquoted Service Path Privilege Escalation Exploit Title: Hotspot Shield Unquoted Service Path Privilege Escalation Date: 13/10/2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com Software Link: https://www.hotspotshield.com/download/ version : 6.0.3 Latest...

Hotspot Shield 6.0.3 - Unquoted Service Path Privilege Escalation

Exploit Title: Hotspot Shield Unquoted Service Path Privilege Escalation Date: 13/10/2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com Software Link: https://www.hotspotshield.com/download/ version : 6.0.3 Latest Tested on: Windows 7 Hotspot Shield installs as a service with an...

CVE-2016-1000219

A flaw was found in Kibana's logging functionality. If custom logging output was configured in Kibana, private user data could be written to the Kibana log files. A system attacker could use this data to hijack sessions of other users when using Kibana behind some form of authentication such as...

kibana: Session hijack via stealing cookies and auth headers from log ESA-2016-04

A flaw was found in Kibana's logging functionality. If custom logging output was configured in Kibana, private user data could be written to the Kibana log files. A system attacker could use this data to hijack sessions of other users when using Kibana behind some form of authentication such as...

Hotspot Shield DLL Hijacking

Exploit Title: Hotspot Shield DLL Hijacking Exploit shcore.dll Date: 27-8-2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com/ Software Link: https://mydati.com/download/hss-win2/HSS-773.exe Version: Tested on:Windows 7...

JVN#45583702: Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries

PhishWall Client Internet Explorer Version, provided by SecureBrain Corporation, is an anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer Version contains an issue with the DLL search path, which may lead to insecurely loading dynamic linking libraries. This...