QNX RTOS 4.25/6.1 - 'phgrafx-startup' Local Privilege Escalation

source: https://www.securityfocus.com/bid/4916/info The QNX phgrafx-startup utility is prone to an issue which may make it possible for local attackers to escalate privileges. This issue is due to unsafe use of the system function to invoke other programs. This vulnerability may be trivially...

QNX RTOS 4.256.1 - phgrafx-startup Local Privilege Escalation

QNX RTOS 4.256.1 - phgrafx-startup Local Privilege Escalation source: https://www.securityfocus.com/bid/4916/info The QNX phgrafx-startup utility is prone to an issue which may make it possible for local attackers to escalate privileges. This issue is due to unsafe use of the system function to...

Code execution in Macromedia Shockwave Flash

"Save" command may be used to place malware file anywhere on user's computer including Startup folder...

CVE-1999-1536

.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file...

CVE-1999-1536: Undefined Security Weakness

.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file...

PT-2001-1865 · Check Point · Zonealarm Pro +1

Name of the Vulnerable Software and Affected Versions: ZoneAlarm and ZoneAlarm Pro affected versions not specified Description: The issue allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object, which prevents ZoneAlarm from starting...

Дырка в xfce (startup script desktop access)

Скрипт, запускаемый при старте программы, позволяет доступ к рабочему столу любым локальным пользователям, что позволяет, например, перехватывать события клавиатуры...

CVE-2000-0420

The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and use it to decrypt Encrypted File System EFS data...

CVE-2000-0420

CVE-2000-0420 concerns Windows 2000 SYSKEY: the default SYSKEY configuration stores the startup key in the registry, which could allow an attacker with local access to recover the key and decrypt EFS data. The linked records reiterate the vulnerability description and do not provide exploit code ...

CVE-2000-0433: Undefined Security Weakness

The SuSE aaabase package installs some system accounts with home directories set to /tmp, which allows local users to gain privileges to those accounts by creating standard user startup scripts such as profiles...

Microsoft Windows NT 4.0 - User Shell Folders

Microsoft Windows NT 4.0 - User Shell Folders source: https://www.securityfocus.com/bid/1042/info The registry value HKEYLOCALMACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Startup specifies the shared startup folder for all users on a system. This key is set...

Microsoft Windows NT 4.0 - User Shell Folders

source: https://www.securityfocus.com/bid/1042/info The registry value HKEYLOCALMACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Startup specifies the shared startup folder for all users on a system. This key is set to be writeable by any authenticated user...

CVE-1999-0411

The vulnerability CVE-1999-0411 affects SCO OpenServer Enterprise System v5.0.4p, where startup scripts S84rpcinit, S95nis, S85tcp, and S89nfs are susceptible to a symlink attack that can let a local user gain root access. The root cause is a symlink-attack in the startup scripts, enabling privil...

CVE-1999-0411

Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access...

PT-1999-1096 · Sco · Sco Openserver Enterprise System

Name of the Vulnerable Software and Affected Versions: SCO OpenServer Enterprise System version 5.0.4p Description: The issue concerns several startup scripts in the system, including S84rpcinit, S95nis, S85tcp, and S89nfs, which are susceptible to a symlink attack. This allows a local user to...

Accessibility Features (Sticky Keys) Persistence via Debugger Registry Key

This module makes it possible to apply the 'sticky keys' hack to a session with appropriate rights. The hack provides a means to get a SYSTEM shell using UI-level interaction at an RDP login screen or via a UAC confirmation dialog. The module modifies the Debug registry setting for certain...

Windows Persistent Startup Folder

This module establishes persistence by creating a payload in the user or system startup folder. Works on Vista and newer systems. Module Options msf use exploit/windows/persistence/startup/folder msf undefinedfolder show actions ...actions... msf undefinedfolder set ACTION msf undefinedfolder sho...

VIM Plugin Persistence

This module creates a VIM Plugin which executes a payload on VIM startup. Module Options msf use exploit/linux/persistence/vim/plugin msf undefinedplugin show actions ...actions... msf undefinedplugin set ACTION msf undefinedplugin show options ...show and set options... msf undefinedplugin run...

Windows Malicious Software Removal Tool - v5.135 (KB890830)

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...

Windows Malicious Software Removal Tool x64 - v5.137 (KB890830)

After the download, this tool runs one time to check your computer for infection by specific, prevalent malicious software including Blaster, Sasser, and Mydoom and helps remove any infection that is found. If an infection is found, the tool will display a status report the next time that you sta...