CVE-2016-4948

Multiple cross-site scripting XSS vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 Template Name field when renaming a template; 2 KDC Server host, 3 Kerberos Security Realm, 4 Kerberos Encryption Types, 5 Advanced...

Valve Patches Trivial XSS Bug in Steam

Valve Corp., has patched a cross-site scripting vulnerability on its popular Steam gaming platform that could be exploited by viewing a maliciously crafted profile. The flaw could allow an attacker to carry out phishing attacks or execute malicious scripts just by opening a crafted profile page. ...

CVE-2016-5237

Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file...

CVE-2016-5237

Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file...

CVE-2016-5237

Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file...

Code injection

Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file...

CVE-2016-5237

Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file...

CVE-2016-5237

CVE-2016-5237 affects Valve Steam client 3.42.16.13 on Windows, where weak filesystem permissions in the Steam program directory allow BUILTIN\Users to modify files, enabling local privilege escalation and potential code execution (exploits exist in Exploit-DB and related references). No official...

Valve Steam Local Lift Vulnerability

Valve Steam is a Linux-based operating system for living room gaming from the American company Valve. A local lift vulnerability exists in Valve Steam version 3.42.16.13, which stems from a program that assigns weak permissions to the Steam directory. An attacker can use this vulnerability to...

Valve Steam 3.42.16.13 - Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Valve Steam 3.42.16.13 Local Privilege Escalation CVE-ID: CVE-2016-5237 Date: 5/11/52016 Exploit Author: gsX Contact: email protected Vendor Homepage: http://www.valvesoftware.com/ Software Link:...

Valve Steam 3.42.16.13 Local Privilege Escalation

Exploit Title: Valve Steam 3.42.16.13 Local Privilege Escalation CVE-ID: CVE-2016-5237 Date: 5/11/52016 Exploit Author: gsX Contact: [email protected] Vendor Homepage: http://www.valvesoftware.com/ Software Link: http://store.steampowered.com/about/ Version: File Version 3.42.16.13, Built: Apr ...

Valve Steam 3.42.16.13 - Local Privilege Escalation

Valve Steam 3.42.16.13 - Local Privilege Escalation Exploit Title: Valve Steam 3.42.16.13 Local Privilege Escalation CVE-ID: CVE-2016-5237 Date: 5/11/52016 Exploit Author: gsX Contact: [email protected] Vendor Homepage: http://www.valvesoftware.com/ Software Link:...

Valve Steam 3.42.16.13 - Local Privilege Escalation

Exploit Title: Valve Steam 3.42.16.13 Local Privilege Escalation CVE-ID: CVE-2016-5237 Date: 5/11/52016 Exploit Author: gsX Contact: [email protected] Vendor Homepage: http://www.valvesoftware.com/ Software Link: http://store.steampowered.com/about/ Version: File Version 3.42.16.13, Built: Apr ...

Schneider Electric Invensys Positioner Buffer Overflow Vulnerability

OVERVIEW Ivan Sanchez from Nullcode Team has identified a buffer overflow security vulnerability in the DTM Device Type Manager software for Schneider Electric’s Invensys SRD Control Valve Positioner product line. Schneider Electric has produced a new version that mitigates this vulnerability...

Valve Steam权限获取漏洞

No description provided by source...

Valve Steam Privilege Acquisition Vulnerability

Valve Steam is a Linux-based operating system for living room gaming from the American company Valve. A security vulnerability exists in Valve Steam version 2.10.91.91, which originates when the program assigns weak permissions user: read/write to the Install folder. This vulnerability can be...

CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

CVE-2015-7985

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...

Code injection

Valve Steam 2.10.91.91 uses weak permissions Users: read and write for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file...