2436 matches found
The vulnerability of the Windows operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.
The vulnerability of the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Microsoft Windows Information Disclosure Vulnerability (CNVD-2019-22216)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in Microsoft Windows unistore.dll, which...
Cisco Prime Infrastructure Runrshell Privilege Escalation Exploit
Exploit for hardware platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Prime Infrastructure Runrshell Privilege Escalation', 'Description' = %q This...
EUVD-2019-17373
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution...
Windows Audio Service Elevation of Privilege Vulnerability
An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This...
CVE-2018-5405
creationtimestamp| type| source ---|---|--- 2019-06-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46956...
Code injection
In AutomateAppCore.dll in Blue Prism Robotic Process Automation 6.4.0.8445, a vulnerability in access control can be exploited to escalate privileges. The vulnerability allows for abusing the application for fraud or unauthorized access to certain information. The attack requires a valid user...
Revive Adserver: Authentication Bypass by abusing Insecure crypto tokens in /lib/OA/Dal/PasswordRecovery.php:
Hi, This is a fun bug I came across while doing a pentest for a client, after going through Revive Advserver's code for a few hours, I found this authentication bypass. This vulnerability seem to affect all versions, including the latest one, I was sent by one of your developers to report it here...
Critical Flaw in Cisco Elastic Services Controller Allows Full System Takeover
A critical vulnerability in the Cisco Elastic Services Controller could allow an unauthenticated, remote attacker to take full control of impacted systems – merely by sending a crafted request. Cisco Elastic Services Controller is a virtual network functions manager, which enables businesses to...
Security Bulletin: IBM Security Guardium is affected by a Spring Framework vulnerability
Summary IBM Security Guardium has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-15756 DESCRIPTION: Pivotal Spring Framework is vulnerable to a denial of service, caused by improper handling of range request by the ResourceHttpRequestHandler. By adding a range header...
Design/Logic Flaw
A vulnerability has been identified in SIMATIC CP 443-1 OPC UA All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions = V2.5 V2.6.1, SIMATIC S7-1500 Software Controller All versions between V2.5 including and V2.7 excluding, SIMATIC WinCC OA All versions...
Exploit for CVE-2013-0422
K8tools 20190403 声明: 工具仅供安全研究或授权渗透，非法用途后果自负。 博客: https://www.cnblogs.com/k8gege 下载: https://github.com/k8gege/K8tools 密码: k8gege k8team K8team PS: 不定期更新,文件比较大，可按需下载。 提权工具均可在远控cmd或WebShell下运行，大部份经过修改重新编译兼容性稳定性比网上要好 综合工具 + 综合工具 K8飞刀Final.rar + K8data.mdb K8飞刀漏洞数据库20190402 + K8expList.txt K8飞刀漏洞利用列表...
CVE-2019-0667
creationtimestamp| type| source ---|---|--- 2019-03-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46568 2019-03-20 00:44:16+00:00| published-proof-of-concept| https://t.me/VulnerabilityNews/5525...
Cscape Input Validation Error Vulnerability
Cscape is an application that can program the full range of OCS. An input validation error vulnerability exists in Cscape 9.80 SP4 and earlier versions. The vulnerability can be exploited by an attacker to read confidential information and remotely execute arbitrary code via a specially crafted P...
CVE-2019-6214
creationtimestamp| type| source ---|---|--- 2019-01-28 15:10:00+00:00| seen| MISP/5c4f1a2e-1300-4391-87cf-19c50a021402 2019-01-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46298...
phpMyAdmin SQL Injection Vulnerability (CNVD-2021-45289)
phpMyAdmin is a PHP-based database management tool for MySQL on Web-Base, allowing administrators to manage MySQL databases with a Web interface. A SQL injection vulnerability exists in the Designer feature of phpMyAdmin before 4.8.5. The vulnerability can be exploited by an attacker with a...
CVE-2019-6225
creationtimestamp| type| source ---|---|--- 2019-01-24 16:28:00+00:00| seen| MISP/5c49e6e0-a794-4c2f-afe2-4c8e0a021402 2019-01-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46248 2019-01-28 15:10:00+00:00| seen| MISP/5c4f1a2e-1300-4391-87cf-19c50a021402 2020-10-09...
Chrome in Android Leaks Device Fingerprinting Info
Google has issued a partial fix for an Android issue dating back to 2015 – after originally rejecting the bug report on the grounds of the mobile OS “working as intended.” The issue – which still doesn’t have a CVE designation despite being partially addressed as a problem – has to do with how...
