CVE-2017-5683

Privilege escalation in IntelHAXM.sys driver in the Intel Hardware Accelerated Execution Manager before version 6.0.6 allows a local user to gain system level access...

Multiple AVG Product DLL Load Local Code Injection Vulnerabilities

AVG Ultimate and others are antivirus programs from the Czech company AVG. A local code injection vulnerability exists in several AVG products. A local attacker can exploit this vulnerability to execute arbitrary code in the context of the system running in the affected program to gain full contr...

VM Escape Earns Hackers $105K at Pwn2Own

Hackers managed to take down Microsoft Edge and escape a virtual machine to boot on the third day of Pwn2Own early Friday. Members from Qihoo’s 360 Security Team carried out the VM exploit, earning the group $105,000, by far the highest amount awarded to a group at the hacking challenge this week...

CVE-2017-5169

An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request Forgery vulnerabilities have been identified. The flaws exist within the Redis and Apache Felix Gogo servers that are installed as part of this product. By issuing specific HTTP Po...

MEDCIN engine of the exploitability of the vulnerability details-vulnerability warning-the black bar safety net

! Science: the MEDCIN engine is a service to doctors and nurses electronic medical records system. A few months ago, I was in the MEDCIN engine to older versions of the safety assessment found a loophole. So I to the Supplier a report of the vulnerabilities and then repair, after viewing the...

EFTP 2.0.7 .337 Buffer Overflow Code Execution and Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3330/info Encrypted FTP EFTP is both an FTP client and server application for Windows platforms. A malicious user with upload permissions to the target host can cause a buffer overflow in EFTP to execute code of the...

n.runs-SA-2013.001 - Polycom - Command Shell Grants System-Level Access

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2013.001 15-Mar-2013 Vendor: Polycom, http://www.polycom.com Affected Products: Polycom HDX Series Affected Version: 3.1.1.2 Vulnerability: Polycom Command Shell Grants System-Level Access Risk: LOW Overview: The Polycom Command Shell ...

Polycom HDX Privilege Escalation

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2013.001 15-Mar-2013 Vendor: Polycom, http://www.polycom.com Affected Products: Polycom HDX Series Affected Version: setenv othbootargs "devboot=bogus" - reboot reboot, are you sure? y This wil...

MySQL 5.15.5 (Windows) - MySQLJackpot Remote Command Execution

MySQL 5.15.5 Windows - MySQLJackpot Remote Command Execution FARLiGHT ELiTE HACKERS LEGACY R3L3ASE Attached is the MySQL Windows Remote Exploit post-auth, udf technique including the previously released mass scanner. The exploit is mirrored at the farlight website http://www.farlight.org. Oracle...

Google Reacts to Google Wallet Security Issues

Google has temporarily disabled the provisioning of prepaid cards as the company deals with the fallout from the discovery of security vulnerabilities affecting Google Wallet. Google Wallet is a mobile payment application that enables users to store information such as credit cards on their mobil...

PT-2012-2231 · Microsoft · Windows Vista +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 version SP2 Description: The issue allows local users to gain privileges via a crafted...

IBM Lotus Domino IMAP Service Mailbox Name Overflow

The IMAP server component of IBM Lotus Domino Server installed on the remote host fails to properly validate the mailbox name before copying it into a fixed-size stack buffer as part of handling certain unspecified commands. Using a specially crafted mailbox name to which he is subscribed, an...

Panda Platinum Internet Security 2006/2007 privilege escalation and bayesian filter control

Title: Panda Platinum Internet Security 2006/2007 privilege escalation and bayesian filter control security vulnerabilities Author: 3APA3A Vendor: Panda Software Product: Panda Platinum Internet Security 2006 10.02.01 Panda Platinum Internet Security 2007 11.00.00 Panda Antivirus was not tested...

mdaemon72.txt

Summary: A privilege escalation flaw exists in MDaemon 7.2 http://www.mdaemon.com. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the MDaemon tray icon. Vulnerable Versions: MDaemon 7.2 Solutions: The vendor was notified of the issue. Ther...

Privilege escalation in Mailtraq Version 2.6.1.1677.

Summary: A privilege escalation flaw exists in Mailtraq Version 2.6.1.1677 http://www.mailtraq.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while using the Mailtraq administration console. Vulnerable Versions: Mailtraq Version 2.6.1.1677. Solution: The...

Privilege escalation flaw in AClient Service for Windows (Version 5.6.181).

Summary: A privilege escalation flaw exists in the AClient Service for Windows Version 5.6.181 http://www.altiris.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while interacting with the AClient Service for Windows tray icon. Vulnerable Versions: Altiris...

mailtraq.txt

Summary: A privilege escalation flaw exists in Mailtraq Version 2.6.1.1677 http://www.mailtraq.com/. Details: A privilege escalation technique can be used to gain SYSTEM level access while using the Mailtraq administration console. Vulnerable Versions: Mailtraq Version 2.6.1.1677. Solution: The...

All versions of Microsoft Internet Information Services, Remote buffer overflow (SYSTEM Level Access)

All versions of Microsoft Internet Information Services, Remote buffer overflow SYSTEM Level Access Release Date: June 18, 2001 Severity: High Remote SYSTEM level code execution Systems Affected: Microsoft Windows NT 4.0 Internet Information Services 4.0 Microsoft Windows 2000 Internet Informatio...

Oracle Web Listener 4.0.x - for NT Batch File

Oracle Web Listener 4.0.x - for NT Batch File source: https://www.securityfocus.com/bid/1053/info Oracle Web Listener for NT makes use of various batch files as cgi scripts, which are stored in the /ows-bin/ directory by default. Any of these batch files can be used to run arbitrary commands on t...

Oracle Web Listener 4.0.x - for NT Batch File

source: https://www.securityfocus.com/bid/1053/info Oracle Web Listener for NT makes use of various batch files as cgi scripts, which are stored in the /ows-bin/ directory by default. Any of these batch files can be used to run arbitrary commands on the server, simply by appending '?&' and a...