10443 matches found
October 2016 security monthly quality rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1
October 2016 security monthly quality rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security updates includes improvements and fixes from an update that was shipped earlier by update 3185278. To learn more about the non-security improvements and fixes in this update, see th...
MS16-120: Description of the security update for the .NET Framework 3.5.1 for Windows 7 and Windows Server 2008 R2 Service Pack 1: October 11, 2016
MS16-120: Description of the security update for the .NET Framework 3.5.1 for Windows 7 and Windows Server 2008 R2 Service Pack 1: October 11, 2016 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could...
sheed AntiVirus - Unquoted Service Path Privilege Escalation
Exploit for windows platform in category local exploits Exploit Title: sheed AntiVirus Unquoted Service Path Privilege Escalation Date: 11/10/2016 Author: Amir.ght Vendor Homepage: http://sheedantivirus.ir/ Software Link:http://dl.sheedantivirus.ir/setup.exe version : 2.3 Latest Tested on: Window...
Microsoft Windows Kernel 'Win32k.sys' CVE-2016-7211 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...
Microsoft Windows Graphics Component CVE-2016-3209 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft .NET Framework 3.0 SP2 Microsoft .NET Framework 3.5 Microsoft .NET Framewo...
Microsoft Windows Kernel 'Win32k.sys' CVE-2016-7185 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...
Microsoft Windows Graphics CVE-2016-7182 Remote Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the kernel privileges. Technologies Affected Microsoft Live Meeting 2007 Console Microsoft Lync 2010 32-bit Microsoft Lync 2010...
Microsoft Windows Graphics Component CVE-2016-3262 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Live Meeting 2007 Console Microsoft Lync 2010 32-bit Microsoft Lync 2010...
sheed Antivirus 2.3 Privilege Escalation
Exploit Title: sheed AntiVirus Unquoted Service Path Privilege Escalation Date: 11/10/2016 Author: Amir.ght Vendor Homepage: http://sheedantivirus.ir/ Software Link:http://dl.sheedantivirus.ir/setup.exe version : 2.3 Latest Tested on: Windows 7 sheed AntiVirus installs a service with an unquoted...
Sheed AntiVirus 2.3 - Unquoted Service Path Privilege Escalation
Sheed AntiVirus 2.3 - Unquoted Service Path Privilege Escalation Exploit Title: sheed AntiVirus Unquoted Service Path Privilege Escalation Date: 11/10/2016 Author: Amir.ght Vendor Homepage: http://sheedantivirus.ir/ Software Link:http://dl.sheedantivirus.ir/setup.exe version : 2.3 Latest Tested o...
KLA10883 OSI vulnerability in Microsoft Products
An information disclosure vulnerability was found in Microsoft Products. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2016-3209 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More detail...
Sheed AntiVirus 2.3 - Unquoted Service Path Privilege Escalation
Exploit Title: sheed AntiVirus Unquoted Service Path Privilege Escalation Date: 11/10/2016 Author: Amir.ght Vendor Homepage: http://sheedantivirus.ir/ Software Link:http://dl.sheedantivirus.ir/setup.exe version : 2.3 Latest Tested on: Windows 7 sheed AntiVirus installs a service with an unquoted...
HP Client 9.1/9.0/8.1/7.9 - Command Injection
Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on 8.1, 9.0, 9.1 too Tested on: Windows 7 and CentOS releas...
HP Client - Automation Command Injection / Remote Code Execution
Exploit for multiple platform in category local exploits Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on...
HP Client 9.19.08.17.9 - Command Injection
HP Client 9.19.08.17.9 - Command Injection Exploit Title: HP Client - Automation Command Injection Date: 10/10/2016 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: Tested on version 7.9 but should work on 8.1, 9.0, 9.1...
Internet Bug Bounty: Information disclosure in mmap module - python 2.7.12
First thing first, the report was sent to python's security mailing list on the 27.8.16 and was fixed by benjamin on the 5.10.16 rev 144f10202076, and acknowledged be me today 8.10.16. In a security audit I made to the mmap module in python 2.7.12, I have found a major information leak...
JVN#20786316: Cryptography API: Next Generation (CNG) vulnerable to denial-of-service (DoS)
Cryptography API: Next Generation CNG contains an issue in BCryptDecrypt, which may result in a denial-of-service DoS. Impact If CNG processes a specially crafted key data, the product may be terminated abnormally. Solution Upgrade Windows According to the developer, CNG included in Windows 8 and...
Comodo Chromodo Browser - Unquoted Service Path Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits Exploit Title: Comodo Chromodo Browser Unquoted Service Path Privilege Escalation Date: 03/10/2016 Author: Yunus YILDIRIM @Th3GundY Team: CT-Zer0 @CRYPTTECH Website: http://yildirimyunus.com Contact: email protected Category: local Vendor...
Dup Scout Enterprise 9.0.28 Buffer Overflow
!/usr/bin/python print "Dup Scout Enterprise 9.0.28 Buffer Overflow Exploit" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTEM You do not need to be authenticated, password below is...
Disk Savvy Enterprise 9.0.32 Buffer Overflow
!/usr/bin/python print "Disk Savvy Enterprise 9.0.32 Buffer Overflow Exploit" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTEM You do not need to be authenticated, password below is...