172 matches found
Denial Of Service (DoS)
KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager. Multiple integer...
Moderate Photon OS Security Update - PHSA-2019-0145
Updates of 'cairo' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2018-0145
Updates of 'git' packages of Photon OS have been released...
CVE-2018-0145
CVE-2018-0145 affects Cisco Data Center Analytics Framework (DCAF) web-based management interface. Vulnerability: reflected cross-site scripting (XSS) due to insufficient input validation. Condition: unauthenticated, remote attacker can lure a user to click a malicious link, enabling arbitrary sc...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0145) (Stack Clash)
The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0145 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...
CVE-2014-0145
Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service crash or possibly execute arbitrary code via a large 1 L1 table in the qcow2snapshotloadtmp in the QCOW 2 block driver block/qcow2-snapshot.c or 2 uncompressed chunk, 3 chunk length...
CVE-2014-0145
CVE-2014-0145 affects QEMU before 1.7.2 and 2.x before 2.0.0, allowing local users to crash or potentially execute code via buffer overflows in QCOW2 snapshot handling (qcow2_snapshot_load_tmp) or in DMG block handling. Exploitation requires local access; impact is a denial of service and possibl...
Exploit for CVE-2017-0144
PoC exploit for CVE-2017-0144 and CVE-2017-0145, also known as E...
Analysis of the Shadow Brokers release and mitigation with Windows 10 virtualization-based security
On April 14, a group calling themselves the Shadow Brokers caught the attention of the security community by releasing a set of weaponized exploits. Shortly thereafter, one of these exploits was used to create wormable malware that we now know as WannaCrypt, which targeted a large number of...
Microsoft Windows - Uncredentialed SMB RCE (MS17-010) Exploit
This Metasploit module uses information disclosure to determine if MS17-010 has been patched or not. Specifically, it connects to the IPC$ tree and attempts a transaction on FID 0. If the status returned is "STATUSINSUFFSERVERRESOURCES", the machine does not have the MS17-010 patch. This Metasplo...
Microsoft Windows MS17-010 SMB Remote Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework auxiliary/scanner/smb/smbms17010 require 'msf/core' class MetasploitModule 'MS17-010 SMB RCE Detection', 'Description' = %q Uses information disclosure to determine if...
CVE-2017-0145
creationtimestamp| type| source ---|---|--- 2017-04-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41891 2017-05-15 08:36:10+00:00| seen| MISP/591948ff-adb0-4b15-836a-72dfbce2ab96 2017-05-16 12:25:49+00:00| seen| MISP/5919c895-3268-45eb-9b7b-2a8995ca48b7 2017-05-16...
ETERNALBLUE - Remote RCE via SMB & NBT (Windows XP to Windows 2012)
From the shadowbroker, Windows XP to Windows 2012 SMB remote code execution vulnerability, corresponding to the number ETERNALBLUE it. CVE-2017-0143 CVE-2017-0144 CVE-2017-0145 CVE-2017-0146 CVE-2017-0147 CVE-2017-0148 Reference:...
SMB DOUBLEPULSAR Remote Code Execution
This module executes a Metasploit payload against the Equation Group's DOUBLEPULSAR implant for SMB as popularly deployed by ETERNALBLUE. While this module primarily performs code execution against the implant, the "Neutralize implant" target allows you to disable the implant. Module Options msf...
MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya) (uncredentialed check)
The remote Windows host is affected by the following vulnerabilities : - Multiple remote code execution vulnerabilities exist in Microsoft Server Message Block 1.0 SMBv1 due to improper handling of certain requests. An unauthenticated, remote attacker can exploit these vulnerabilities, via a...
CVE-2017-0145
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka...
CVE-2017-0145
CVE-2017-0145 : The SMBv1 server in Windows (various editions listed in the initial document) is vulnerable to remote code execution via crafted SMB packets. The connected documents reiterate that this is a Windows SMB RCE issue affecting SMBv1, with exploit activity historically linked to Eterna...
CVE-2017-0145
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka...
MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya)
The remote Windows host is missing a security update. It is, therefore, affected by the following vulnerabilities : - Multiple remote code execution vulnerabilities exist in Microsoft Server Message Block 1.0 SMBv1 due to improper handling of certain requests. An unauthenticated, remote attacker...