Design/Logic Flaw

Untrusted search path vulnerability in RW-4040 driver installer for Windows 7 version 2.27 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2189

Untrusted search path vulnerability in RW-4040 driver installer for Windows 7 version 2.27 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2016-4902

CVE-2016-4902 involves an insecure DLL search path in the installer for The Public Certification Service for Individuals “The JPKI user’s software” (Windows 7+ Ver3.0.1 and earlier; Windows Vista Ver3.0.1 and earlier; Ver2.6 and earlier). The flaw allows arbitrary code execution with the invoking...

CVE-2017-2190

CVE-2017-2190 affects Sharp RW-4040: untrusted DLL search path in the Windows 7 version 1.2.0.0 tool can allow a Trojan horse DLL to run with the user’s privileges. Root cause is insecure DLL loading (CWE-427) in the DLL search path. Impact described as privilege escalation if a malicious DLL is ...

CVE-2017-2189

CVE-2017-2189 affects Sharp RW-4040 driver installer for Windows 7 (version 2.27). The issue is an insecure DLL search path (CWE-427) that may allow arbitrary code execution when a Trojan horse DLL is loaded during installation, granting the attacker the privilege level of the user running the in...

CVE-2017-2192

Untrusted search path vulnerability in RW-5100 tool to verify execution environment for Windows 7 version 1.1.0.0 and RW-5100 tool to verify execution environment for Windows 8.1 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2191

Untrusted search path vulnerability in RW-5100 driver installer for Windows 7 version 1.0.0.9 and RW-5100 driver installer for Windows 8.1 version 1.0.1.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2190

Untrusted search path vulnerability in RW-4040 tool to verify execution environment for Windows 7 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

VMware Workstation 12 Pro Denial Of Service

/ Title: NULL pointer dereference vulnerability in vstor2 driver VMware Workstation Pro/Player CVE: 2017-4916 VMSA-2017-0009 Author: Borja Merino @BorjaMerino Date: May 18, 2017 Tested on: Windows 10 Pro and Windows 7 Pro SP1 with VMwareAr Workstation 12 Pro 12.5.5 build-5234757 Affected: VMware...

VMware Workstation 12 Pro - Denial of Service

VMware Workstation 12 Pro - Denial of Service / Title: NULL pointer dereference vulnerability in vstor2 driver VMware Workstation Pro/Player CVE: 2017-4916 VMSA-2017-0009 Author: Borja Merino @BorjaMerino Date: May 18, 2017 Tested on: Windows 10 Pro and Windows 7 Pro SP1 with VMware® Workstation ...

CVE-2017-0213 Windows COM elevation of privilege vulnerability-vulnerability warning-the black bar safety net

CVE-2017-0213 Windows COM elevation of privilege vulnerability components take a look at this vulnerability: Windows COM Aggregate Marshaler in the realization of the presence of Privilege escalation vulnerability allows a remote attacker to elevate privileges to execute arbitrary code. Vernacula...

Robert 0.5 - Multiple Vulnerabilities

Exploit Title: Robert 0.5 - Multiple Vulnerabilities XSS, CSRF, Directory traversal & SQLi Date: 07/06/2017 Exploit Author: Cyril Vallicari / HTTPCS - ZIWIT Vendor website :http://robert.polosson.com/ Download link : https://github.com/RobertManager/robert/archive/master.zip Live demo :...

Home Web Server 1.9.1 build 164 - Remote Code Execution Vulnerability

Exploit for windows platform in category remote exploits Exploit Title: Home Web Server 1.9.1 build 164 - CGI Remote Code Execution Date: 26/05/2017 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor...

Disk Sorter 9.7.14 - Input Directory Local Buffer Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: DiskSorter v9.7.14 - Input Directory Local Buffer Overflow - PoC Date: 25 May 2017 Exploit Author: n3ckD Vendor Homepage: http://www.disksorter.com/ Software Link:...

KLA11040 Elevation of privilege vulnerability in Microsoft Windows

An improper handling of objects in memory in Windows kernel-mode driver was found in Microsoft Windows. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed application by a malicious user who has logged on to...

Disk Sorter 9.7.14 - 'Input Directory' Local Buffer Overflow (PoC)

!/usr/bin/python Exploit Title: DiskSorter v9.7.14 - Input Directory Local Buffer Overflow - PoC Date: 25 May 2017 Exploit Author: n3ckD Vendor Homepage: http://www.disksorter.com/ Software Link: http://www.disksorter.com/setups/disksortersetupv9.7.14.exe Version: Disk Sorter v9.7.14 32-Bit Teste...

Disk Sorter 9.7.14 - Input Directory Local Buffer Overflow (PoC)

Disk Sorter 9.7.14 - Input Directory Local Buffer Overflow PoC !/usr/bin/python Exploit Title: DiskSorter v9.7.14 - Input Directory Local Buffer Overflow - PoC Date: 25 May 2017 Exploit Author: n3ckD Vendor Homepage: http://www.disksorter.com/ Software Link:...

DiskSorter 9.7.14 Buffer Overflow

!/usr/bin/python Exploit Title: DiskSorter v9.7.14 - Input Directory Local Buffer Overflow - PoC Date: 25 May 2017 Exploit Author: n3ckD Vendor Homepage: http://www.disksorter.com/ Software Link: http://www.disksorter.com/setups/disksortersetupv9.7.14.exe Version: Disk Sorter v9.7.14 32-Bit Teste...

CVE-2017-6178: from patch contrast-to-Exploit-vulnerability warning-the black bar safety net

Some time ago in the EDB poking around, saw a driver of a kernel Vulnerability, CVE-2017-6178, like me in learning the Kernel PWN the newbie Natural is not missed:, after debugging analysis after feeling learned a few things, so come and share with everyone. USBPcap is a USB packet capture tool,...

JVN#51274854: Multiple software for Sharp IC Card Reader/Writer Devices may insecurely load Dynamic Link Libraries

The tool to verify execution environment and the driver installer for IC Card Reader/Writer devices provided by Sharp Corporation contain an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege o...