NETGATE Data Backup build 3.0.605 - Unquoted Service Path Privilege Escalation

NETGATE Data Backup build 3.0.605 - Unquoted Service Path Privilege Escalation Exploit Title: NETGATE Data Backup Unquoted Service Path Privilege Escalation Date: 15/10/2016 Author: Amir.ght Vendor Homepage: http://www.netgate.sk/ Software Link: http://www.netgate.sk/download/download.php?id=5...

NETGATE AMITI Antivirus 23.0.305 - Unquoted Service Path Privilege Escalation

NETGATE AMITI Antivirus 23.0.305 - Unquoted Service Path Privilege Escalation Exploit Title: NETGATE AMITI Antivirus Unquoted Service Path Privilege Escalation Date: 15/10/2016 Author: Amir.ght Vendor Homepage: http://www.netgate.sk/ Software Link: http://www.netgate.sk/download/download.php?id=1...

NETGATE AMITI Antivirus 23.0.305 - Unquoted Service Path Privilege Escalation

Exploit Title: NETGATE AMITI Antivirus Unquoted Service Path Privilege Escalation Date: 15/10/2016 Author: Amir.ght Vendor Homepage: http://www.netgate.sk/ Software Link: http://www.netgate.sk/download/download.php?id=11 Version : build 23.0.305 Latest Tested on: Windows 7 AMITI Antivirus install...

NETGATE Data Backup build 3.0.605 - Unquoted Service Path Privilege Escalation

Exploit Title: NETGATE Data Backup Unquoted Service Path Privilege Escalation Date: 15/10/2016 Author: Amir.ght Vendor Homepage: http://www.netgate.sk/ Software Link: http://www.netgate.sk/download/download.php?id=5 version : build 3.0.605 Latest Tested on: Windows 7 NETGATE Data Backup installs ...

Spy Emergency 23.0.205 Privilege Escalation

Exploit Title: Spy Emergency Unquoted Service Path Privilege Escalation Date: 15/10/2016 Author: Amir.ght Vendor Homepage: http://www.spy-emergency.com/ Software Link: http://www.spy-emergency.com/download/download.php?id=1 version : build 23.0.205 Latest Tested on: Windows 7 Spy Emergency instal...

CVE-2016-3393

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site,...

CVE-2016-3298

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure...

CVE-2016-0142

Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Video Control Remote Code Execution Vulnerability."...

Remote code execution

Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Video Control Remote Code Execution Vulnerability."...

Privilege escalation

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

Information disclosure

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure...

CVE-2016-3376

CVE-2016-3376 is a local privilege escalation in the Windows kernel Win32k subsystem affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7, 8.1, Server 2012, Windows RT 8.1, and Windows 10 releases 1511/1607). The flaw involves the kernel-mode drivers mishandling objects i...

CVE-2016-3298

CVE-2016-3298 affects Microsoft Internet Explorer 9–11 and the Internet Messaging API on Windows (Vista/7/Server 2008 R2 family). The root cause is improper handling of objects in memory, enabling a crafted web site to disclose whether arbitrary files exist on disk (information disclosure). The v...

CVE-2016-0142

CVE-2016-0142 is the Microsoft Video Control remote code execution vulnerability documented by NVD. It affects Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The issue arises from improper handling of objects in memory within the Video Cont...

Wondershare PDFelement 5.2.9 - Unquoted Service Path Privilege Escalation

Exploit Title: Wondershare PDFelement Unquoted Service Path Privilege Escalation Date: 10/14/2016 Author: Saeed Hasanzadeh Net.Hun73r Vendor Homepage: https://www.wondershare.com/ Software Link: http://download.wondershare.com/inst/pdfelementsetupfull1042.exe version : 5.2.9 Tested on: Windows 7...

Hotspot Shield 6.0.3 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Hotspot Shield Unquoted Service Path Privilege Escalation Date: 13/10/2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com Software Link: https://www.hotspotshield.com/download/ version : 6.0.3 Latest Tested on...

Evernote 6.1.2.2292 DLL Hijacking

Aloha, Summary Evernote contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. The vulnerability exists due to some DLL file is loaded by 'Evernote6.1.2.2292.exe' improperly. And it allows an attacker to load...

IObit Malware Fighter 4.3.1 Privilege Escalation

Exploit Title: IObit Malware Fighter Unquoted Service Path Privilege Escalation Date: 12/10/2016 Author: Amir.ght Vendor Homepage: http://www.iobit.com/en/index.php Software Link: http://www.iobit.com/downloadcenter.php?product=malware-fighter-free version : 4.3.1 Latest Tested on: Windows 7 IObi...

OpenCimetiere 3.0.0-a5 Blind SQL Injection

Exploit Title: OpenCimetiere v3.0.0-a5 | Blind SQL Injection Date: 06/08/16 Exploit Author: Wad Deek Vendor Homepage: http://www.openmairie.org/ Software Link: http://www.openmairie.org/catalogue/opencimetiere/ Version: 3.0.0-a5 +3.0.0-a5 /opencimetiere/HISTORY.txt Tested on: Xampp with PostgreSQ...

Hotspot Shield 6.0.3 Privilege Escalation

Exploit Title: Hotspot Shield Unquoted Service Path Privilege Escalation Date: 13/10/2016 Author: Amir.ght Vendor Homepage: https://www.hotspotshield.com Software Link: https://www.hotspotshield.com/download/ version : 6.0.3 Latest Tested on: Windows 7 Hotspot Shield installs as a service with an...