DllHijackAuditor 3.5 - Stack Overflow Vulnerability

Document Title: =============== DllHijackAuditor 3.5 - Stack Overflow Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1954 Release Date: ============= 2016-09-21 Vulnerability Laboratory ID VL-ID: ==================================== 1954...

The vulnerability of the SAP HANA database management system allows a hacker to bypass the authentication process.

The vulnerability of the SAP HANA database management system’s SQL interface stems from the lack of restrictions on the number of login attempts by the SYSTEM user when the passwordlockforsystemuser option is not supported or set to “False”. Exploiting this vulnerability allows a malicious actor ...

CVE-2016-6144

The SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for the SYSTEM user when the passwordlockforsystemuser is not supported or is configured as "False," which makes it easier for remote attackers to bypass authentication via a brute force attack, aka SAP...

CVE-2016-6144

The SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for the SYSTEM user when the passwordlockforsystemuser is not supported or is configured as "False," which makes it easier for remote attackers to bypass authentication via a brute force attack, aka SAP...

Skype User Configuration Files

Nessus was able to collect the Skype user configuration files for each system user. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid92432; scriptversion"1.5"; scriptcvsdate"Date: 2018/05/23 16:10:01"; scriptnameenglish:"Skype User Configuration Files";...

Samsung SW Update 2.2.7.22 Insecure ACLs

Blue Frost Security GmbH https://www.bluefrostsecurity.de/ researchatbluefrostsecurity.de BFS-SA-2016-002 25-April-2016 Vendor: Samsung, www.samsung.com Affected Products: SW Update Affected Version: cacls "c:\Programdata\Samsung\SW...

File Replication Pro Remote Command Execution Vulnerability

File Replication Pro is a file management solution for backing up, copying files from different network nodes. A remote command execution vulnerability exists in File Replication Pro 7.2.0 and earlier versions. An attacker can exploit the vulnerability to remotely execute arbitrary commands as th...

CVE-2016-4422

The pamsmauthenticate function in pamsshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account...

CVE-2016-4422

The pamsmauthenticate function in pamsshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account...

CVE-2016-4422

The pamsmauthenticate function in pamsshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account...

Authentication flaw

The pamsmauthenticate function in pamsshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account...

UBUNTU-CVE-2016-4422

The pamsmauthenticate function in pamsshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account...

CVE-2016-4422

Removed by vendor...

CVE-2016-4422

The pamsmauthenticate function in pamsshauth.c in libpam-sshauth might allow context-dependent attackers to bypass authentication or gain privileges via a system user account...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data

The vulnerability in the packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java file of the Setup Wizard component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass security...

Acunetix WVS 10 - Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits ''' ======================================================================== Acunetix WVS 10 - from guest to Sytem Local privilege escalation CVE: CVE-2015-4027 Author: me Daniele Linguaglossa Affected Product: Acunetix WVS 10 Exploit: Local...

Acunetix WVS 10 - Local Privilege Escalation

Acunetix WVS 10 - Local Privilege Escalation ''' ======================================================================== Acunetix WVS 10 - from guest to Sytem Local privilege escalation CVE: CVE-2015-4027 Author: me Daniele Linguaglossa Affected Product: Acunetix WVS 10 Exploit: Local privilege...

Acunetix WVS 10 - Local Privilege Escalation

''' ======================================================================== Acunetix WVS 10 - from guest to Sytem Local privilege escalation CVE: CVE-2015-4027 Author: me Daniele Linguaglossa Affected Product: Acunetix WVS 10 Exploit: Local privilege escalation Vendor: Acunetix ltd Remote: No...

Samsung Android 5. 0 device WifiCredService remote code execution-vulnerability warning-the black bar safety net

The vulnerability is in a few months ago is Google Project Zero and the Quarkslab team found, has only recently been disclosed. The vulnerability only requires the user to browse a website or download a mail attachment or by the basic will not have any rights of a third party malicious programs c...

IBM WebSphere Application Server Commons-Collections Library Remote Code Execution (CVE-2015-7450)

A remote code execution vulnerability has been reported in IBM WebSphere Application Server. The vulnerability is due deserialization of untrusted data while having the vulnerable version of Apache Commons-Collections library in the code path. A remote, unauthenticated attacker can exploit this...