NETGATE Data Backup 3.0.605 Privilege Escalation
Posted by deepcore under exploit (No Respond)
NETGATE Data Backup build 3.0.605 suffers from an unquoted service path privilege escalation vulnerability.
Archive for October, 2016
Subrion CMS 4.0.5 Cross Site Request Forgery / Cross Site Scripting
Posted by deepcore under exploit (No Respond)
Subrion CMS version 4.0.5 suffers from cross site request forgery and cross site scripting vulnerabilities.
iWisoft Free Video Downloader 2.1 DLL Hijacking
Posted by deepcore under exploit (No Respond)
iWisoft Free Video Downloader version 2.1 suffers from a dll hijacking vulnerability.
Advanced Upload (PHP) Script 1.0.2 SQL Injection
Posted by deepcore under exploit (No Respond)
Advanced Upload (PHP) Script version 1.0.2 suffers from a remote SQL injection vulnerability.
Windows x86 afd.sys Privilege Escalation
Posted by deepcore under exploit (No Respond)
Windows x86 afd.sys privilege escalation exploit that leverages the issue outlined in MS11-046.
Windows DeviceApi CMApi Privilege Escalation
Posted by deepcore under exploit (No Respond)
The Windows DeviceApi CMApi PnpCtxRegOpenCurrentUserKey function doesn’t check the impersonation level of the current effective token allowing a normal user to create arbitrary registry keys in another user’s loaded hive leading to elevation of privilege.
Windows DFS Client Driver Arbitrary Drive Mapping Privilege Escalation
Posted by deepcore under exploit (No Respond)
The Windows DFS Client driver and running by default insecurely creates and deletes drive letter symbolic links in the current user context leading to elevation of privilege.
Windows DeviceApi CMApi PiCMOpenClassKey IOCTL Privilege Escalation
Posted by deepcore under exploit (No Respond)
The Windows DeviceApi CMApi PiCMOpenClassKey IOCTL allows a normal user to create arbitrary registry keys in the system hive leading to elevation of privilege.
Windows Diagnostics Hub DLL Loading Privilege Escalation
Posted by deepcore under exploit (No Respond)
The fix for CVE-2016-3231 is insufficient to prevent a normal user specifying an insecure agent path leading to arbitrary DLL loading at system privileges.
Windows User Profile Service Privilege Escalation
Posted by deepcore under exploit (No Respond)
Windows suffers from an elevation of privilege vulnerability in the User Profile Service.
