Path traversal with SaveDir and UploadDir

PMASA-2016-37 Announcement-ID: PMASA-2016-37 Date: 2016-07-12 Summary Path traversal with SaveDir and UploadDir Description A vulnerability was reported with the %u username replacement functionality of the SaveDir and UploadDir features. When the username substitution is configured, a...

Tiki Wiki CMS 15.0 - Arbitrary File Download

Exploit for php platform in category web applications Exploit Title: Tiki Wiki CMS 15.0 Arbitrary File Download Date: 11-07-2016 Software Link: https://tiki.org Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1...

Fedora Update for mingw-xerces-c FEDORA-2016-87e8468465

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Horizon View DoS

The vulnerability of the TPView.dll library in the VMware Horizon View Client virtualization solution is related to resource management errors. Exploiting this vulnerability can allow users of the guest operating system to cause failures in the host operating system...

OpenDocMan v1.3.5 - Full Path Disclosure Vulnerability

Document Title: =============== OpenDocMan v1.3.5 - Full Path Disclosure Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1868 Release Date: ============= 2016-07-03 Vulnerability Laboratory ID VL-ID: ==================================== 186...

Lenovo Solution Center Local Elevation of Privilege Vulnerability

Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. A local elevation of privilege vulnerability exists in versions prior to LSC 3.3.003. A local attacker...

Lenovo Solution Center Arbitrary Code Execution Vulnerability

Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. An arbitrary code execution vulnerability exists in LSC versions prior to 3.3.003. An attacker can...

CVE-2016-5249

Lenovo Solution Center LSC before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly...

CVE-2016-5249

Lenovo Solution Center LSC before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly...

CVE-2016-5248

The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument...

CVE-2016-5248

The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument...

Design/Logic Flaw

Lenovo Solution Center LSC before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly...

Command injection

The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument...

CVE-2016-5249

Lenovo Solution Center LSC before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly...

CVE-2016-5248

The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument...

CVE-2016-5249

Lenovo Solution Center (LSC) versions before 3.3.003 are affected by CVE-2016-5249, enabling local users to execute arbitrary code with LocalSystem privileges via the LSC.Services.SystemService StartProxy path using a pre-created named pipe and a crafted .NET assembly. The root cause involves a l...

CVE-2016-5248

The CVE-2016-5248 issue affects Lenovo Solution Center versions older than 3.3.003. The StopProxy command in LSC.Services.SystemService allows local users to terminate arbitrary processes via the PID argument, indicating a local privilege/availability impact. Lenovo advisory LEN-7814 confirms the...

CVE-2016-5249: Undefined Security Weakness

Lenovo Solution Center LSC before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly...

PT-2016-6325

Name of the Vulnerable Software and Affected Versions Lenovo Solution Center versions prior to 3.3.003 Description The issue allows local users to terminate arbitrary processes. This is achieved through the StopProxy command in LSC.Services.SystemService, where a user can specify the PID argument...

PT-2016-6326

Name of the Vulnerable Software and Affected Versions Lenovo Solution Center versions prior to 3.3.003 Description The issue allows local users to execute arbitrary code with LocalSystem privileges. This can be achieved via vectors involving the LSC.Services.SystemService StartProxy command, wher...