Lucene search
+L

33190 matches found

Tenable Nessus
Tenable Nessus
•added 2023/04/20 12:00 a.m.•9 views

RoboDK Installed (Windows)

Binary data robodkwininstalled.nbin...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/04/19 12:00 a.m.•12 views

Workspace ONE Data Collection

Binary data workspaceonecollect.nbin...

7.3AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
•added 2023/04/18 1:00 p.m.•39 views

Automating Qakbot Detection at Scale With Velociraptor

In this blog, you will learn a practical methodology to extract configuration data from recent Qakbot samples. I will provide some background on Qakbot, then walk through decode themes in an easy to visualize manner. Additionally, I'll share a Velociraptor artifact to detect and automate the deco...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/04/17 12:00 a.m.•10 views

Microsoft ODBC Driver for SQL Server Installed (Windows)

Binary data microsoftodbcdriverforsqlserverwininstalled.nbin...

7.3AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2023/04/17 12:00 a.m.•325 views

AspEmail 5.6.0.2 Weak Permissions / Local Privilege Escalation

Exploit Title: AspEmail 5.6.0.2 - Local Privilege Escalation Vulnerability Category: Weak Services Permission - Binary Permission Vulnerability Date: 13/04/2023 Exploit Author: Zer0FauLT [email protected] Vendor Homepage: https://www.aspemail.com Software Link:...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/04/17 12:00 a.m.•20 views

Microsoft OLE DB Driver for SQL Server Installed (Windows)

Binary data microsoftoledbdriverforsqlserverwininstalled.nbin...

7.3AI score
SaveExploits0References1
NVD
NVD
•added 2023/04/16 1:15 a.m.•28 views

CVE-2022-37705

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the...

6.7CVSS7AI score0.01257EPSS
SaveExploits2References13
OSV
OSV
•added 2023/04/16 1:15 a.m.•8 views

DEBIAN-CVE-2022-37704

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure...

6.7CVSS6.4AI score0.0053EPSS
SaveExploits1References1
Prion
Prion
•added 2023/04/16 1:15 a.m.•20 views

Information disclosure

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure...

4CVSS6.5AI score0.0053EPSS
SaveExploits1References11Affected Software1
Prion
Prion
•added 2023/04/16 1:15 a.m.•24 views

Privilege escalation

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the...

4CVSS6.5AI score0.01257EPSS
SaveExploits2References12Affected Software1
Vulnrichment
Vulnrichment
•added 2023/04/16 12:00 a.m.•7 views

CVE-2022-37704

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure...

6.8AI score0.0053EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/16 12:00 a.m.•0 views

CVE-2022-37704: Improper Neutralization of Special Elements used in a Command

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure...

6.7CVSS5.9AI score0.0053EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/04/16 12:00 a.m.•21 views

CVE-2022-37705

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the...

7.3AI score0.01257EPSS
SaveExploits2References12
CNVD
CNVD
•added 2023/04/16 12:00 a.m.•20 views

Binary Vulnerability in GR1108-P of Xinhua San Technologies Ltd.

The GR1108-P is a Gigabit wireless enterprise-class routing device manufactured by Xinhua San Technologies H3C. A binary vulnerability exists in the Xinhua San Technologies GR1108-P, which can be exploited by an attacker to gain control of the server...

7.1AI score
SaveExploits0
CVE
CVE
•added 2023/04/16 12:00 a.m.•153 views

CVE-2022-37704

Summary of CVE-2022-37704 : Amanda 3.5.1 contains a privilege escalation in the SUID binary /lib/amanda/rundump, which can cause root execution of /usr/sbin/dump with attacker-controlled arguments. This can enable local privilege escalation, and may also lead to denial of service and information ...

6.7CVSS6.5AI score0.0053EPSS
SaveExploits1References12Affected Software1
Cvelist
Cvelist
•added 2023/04/16 12:00 a.m.•52 views

CVE-2022-37704

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure...

6.9AI score0.0053EPSS
SaveExploits1References11
CVE
CVE
•added 2023/04/16 12:00 a.m.•139 views

CVE-2022-37705

CVE-2022-37705 affects Amanda 3.5.1. The runtar SUID wrapper to tar mishandles arguments, enabling a backup user to escalate to root. Public notes in Debian LTS advisories confirm a fix in amanda packages (e.g., Debian 11 1:3.5.1-7+deb11u1) and CloudLinux/LT advisory references indicate tar optio...

6.7CVSS6.8AI score0.01257EPSS
SaveExploits2References13Affected Software1
Debian CVE
Debian CVE
•added 2023/04/16 12:00 a.m.•57 views

CVE-2022-37705

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the...

6.7CVSS6.7AI score0.01257EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2023/04/13 12:00 a.m.•14 views

Cisco DNA Center Web Interface Detection

Binary data ciscodnacenterwebdetect.nbin...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/04/12 12:00 a.m.•19 views

Google Protobuf Go Module Installed (Linux/UNIX)

Binary data googleprotobufgomodulelinuxinstalled.nbin...

7.3AI score
SaveExploits0References1
Rows per page
Query Builder