RubyMine 2016.1 - CMD Manual Buffer Overflow Exploitation

Document Title: =============== RubyMine 2016.1 - CMD Manual Buffer Overflow Exploitation References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2089 Video: https://www.youtube.com/watch?v=4Sk0rq1Z8Qk Release Date: ============= 2017-08-17 Vulnerability Laboratory ID VL-ID:...

CVE-2017-11589

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is no access control for info.html, wancfg.cmd, rtroutecfg.cmd, arpview.cmd, cpuview.cmd, memoryview.cmd, statswan.cmd,...

Metasploit RPC Console Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/rpc/v10/client' class MetasploitModule 'Metasploit RPC Console Command Execution', 'Description' = %q This module connects to a specified Metasploit RPC...

Metasploit RPC Console Command Execution Exploit

This Metasploit module connects to a specified Metasploit RPC server and uses the 'console.write' procedure to execute operating system commands. Valid credentials are required to access the RPC interface. This Metasploit module has been tested successfully on Metasploit 4.15 on Kali 1.0.6;...

CyberArk Viewfinity 5.5.10.95 - Local Privilege Escalation

Exploit Title: Privilege Escalation via CyberArk Viewfinity 8. This will spawn a new CMD prompt. Verify you are now Administrator by typing in "net session" 3. Solution Vendor has...

PT-2017-4236

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.12.3 Description The issue is related to a buffer overflow in the brcmf cfg80211 mgmt tx function. This can be exploited to cause a denial of service, resulting in a system crash, or potentially to gain...

radare2 'libr/core/cmd_info.c' remote denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'cmdinfo' function in the libr/core/cmdinfo.c file in radare2 version 1.5.0. A remote attacker can exploit this vulnerability to cause a denial of service reuse after release and...

PT-2017-19168

Name of the Vulnerable Software and Affected Versions radare2 version 1.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, by providing a crafted binary file. This is due to a problem in the cmd info function...

Easy MOV Converter 1.4.24 Buffer Overflow

!/usr/bin/python Exploit Title: Easy MOV Converter 1.4.24 - 'Enter User Name' Field Buffer Overflow SEH Date: 13-06-2017 Exploit Author: @abatchy17 -- www.abatchy.com Vulnerable Software: Easy MOV Converter Vendor Homepage: http://www.divxtodvd.net/ Version: 1.4.24 Software Link:...

DiskBoss 8.0.16 - Input Directory Local Buffer Overflow

DiskBoss 8.0.16 - Input Directory Local Buffer Overflow !/usr/bin/python Exploit Title: DiskBoss v8.0.16 - Local Buffer Overflow Date: 11-06-2017 Exploit Author: @abatchy17 -- www.abatchy.com Vulnerable Software: DiskBoss v8.0.16 Freeware, Pro and Ultimate Vendor Homepage:...

ImageWorsener Denial of Service Vulnerability (CNVD-2017-08091)

ImageWorsener is a set of image scaling and processing utilities. A denial of service vulnerability exists in imagew-cmd.c:854:45 in the libimageworsener.a file in ImageWorsener version 1.3.1. A remote attacker can exploit this vulnerability to cause a denial of service except for a zero error wi...

Threat Outbreak Alert RuleID29035: Email Messages Distributing Malicious Software on May 8, 2017

Medium Alert ID: 53756 First Published: 2017 May 9 13:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29035 may contain the following files: Name | Size ...

PT-2017-18106

Name of the Vulnerable Software and Affected Versions TP-Link TL-SG108E version 1.0 TP-Link TL-SG108E firmware 1.1.2 Build 20141017 Rel.50749 Description The issue allows the upgrade process to be requested remotely without authentication. This is achieved through the httpupg.cgi endpoint with a...

openSUSE Security Update : open-vm-tools (openSUSE-2017-385)

This update for open-vm-tools to 10.1.0 stable brings features, fixes bugs and security issues : - New vmware-namespace-cmd command line utility - GTK3 support - Common Agent Framework CAF - Guest authentication with xmlsec1 - Sub-command to push updated network information to the host on demand ...

PT-2017-7811

Name of the Vulnerable Software and Affected Versions virglrenderer versions prior to 0.6.0 Description The issue is related to a memory leak in the virgl resource attach backing function. This leak allows local guest OS users to cause a denial of service by consuming memory through a large numbe...

SUSE SLES11 Security Update : open-vm-tools (SUSE-SU-2017:0705-1)

This update for open-vm-tools to 10.1.0 stable brings features, fixes bugs and security issues : - New vmware-namespace-cmd command line utility - GTK3 support - Common Agent Framework CAF - Guest authentication with xmlsec1 - Sub-command to push updated network information to the host on demand ...

Apache Struts Jakarta Multipart Parser OGNL Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Apache Struts Jakarta Multipart Parser OGNL Injection', 'Description' = %q This module exploits a remote code execution...

PT-2017-1503

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to a memory leak in the virgl resource attach backing function, which can be exploited by a local guest OS user to cause a denial of service through host memory consumption...

PT-2017-1507

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to a memory leak in the virgl cmd resource unref function, which can be exploited by local guest OS users to cause a denial of service through host memory consumption. This...

Rapid7 Metasploit Directory Traversal Vulnerability (CNVD-2017-02664)

Metasploit Pro is a guided penetration testing platform. A directory traversal vulnerability exists in the Meterpreter stdapi CommandDispatcher.cmddownload function in versions prior to Rapid7 Metasploit 4.13.0-2017020701. An attacker can exploit the vulnerability to write arbitrary files on the...