Reptile Rootkit reptile_cmd Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reptile Rootkit reptilecmd Privilege Escalation', 'Description' = %q This module uses Reptile rootkit's reptilecmd backdoor executable to gain ro...

Dokuwiki 2018-04-22b - Username Enumeration

Dokuwiki 2018-04-22b - Username Enumeration Exploit Title: Dokuwiki 2018-04-22b - Username Enumeration Date: 2019-12-01 Exploit Author: Talha ŞEN Vendor Homepage: https://www.dokuwiki.org/dokuwiki Software Link: https://download.dokuwiki.org/ Version: 2018-04-22b "Greebo" Tested on: Alpine Linux...

Siemens IE/WSN-PA Link WirelessHART Gateway Cross-site Scripting (ICSA-19-253-04)

Binary data 720317.prm...

CVE-2005-4890

creationtimestamp| type| source ---|---|--- 2019-11-04 22:31:13+00:00| seen| https://t.me/cibsecurity/7872 2024-02-04 07:36:57+00:00| seen| https://t.me/ctinow/178703 2026-05-22 15:01:30+00:00| seen| https://gist.github.com/raizen74/3404867c3b0257a1949ae189d7e97a7d...

Microsoft Spooler Local Privilege Elevation Vulnerability

This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there is no way to remove the dll once it is loaded by the service. Essentially, on default settings, this module adds...

CVE-2019-3978

creationtimestamp| type| source ---|---|--- 2019-10-29 18:57:45+00:00| published-proof-of-concept| https://t.me/antichat/6903 2019-10-29 19:57:25+00:00| published-proof-of-concept| https://t.me/cybershit/608 2019-10-30 01:40:05+00:00| seen| https://t.me/dtpnk/368 2019-10-30 10:21:42+00:00| seen|...

CVE-2019-3976

creationtimestamp| type| source ---|---|--- 2019-10-29 18:57:45+00:00| published-proof-of-concept| https://t.me/antichat/6903 2019-10-29 19:57:25+00:00| published-proof-of-concept| https://t.me/cybershit/608 2019-10-30 01:40:05+00:00| seen| https://t.me/dtpnk/368 2019-10-30 10:21:42+00:00| seen|...

Slackware 14.2 / current : mozilla-firefox (SSA:2019-295-01)

New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-295-01. The text itself is copyright C Slackware Linux,...

AVEVA Vijeo Citect and Citect SCADA (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit --------- Begin Update A Part 1 of 5 --------- Vendor: AVEVA and Schneider Electric Equipment: AVEVA’s Vijeo Citect and Citect SCADA; Schneider Electric’s Power SCADA Operation --------- End Update A Part...

CVE-2019-6333

creationtimestamp| type| source ---|---|--- 2019-10-11 09:36:27+00:00| seen| https://t.me/canyoupwnme/6036 2019-10-11 15:28:04+00:00| seen| https://t.me/SecLabNews/5970 2019-10-15 15:20:26+00:00| published-proof-of-concept| https://t.me/alexmakus/3095 2024-03-14 12:17:18+00:00|...

Siemens SIMATIC RF6XXR < 3.2.1 Multiple Vulnerabilities (ICSA-19-192-04)

Binary data 720302.prm...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS Improper Input Validation and Resource Management Errors (ICSA-18-107-04)

Binary data 720288.prm...

Rockwell Automation MicroLogix 1100 and 1400 <= 16.0 Improper Information Handling (ICSA-17-115-04)

Binary data 720295.prm...

Rockwell Automation Stratix and ArmorStratix Switches < 15.3 IOS SNMP Remote Code Execution (ICSA-17-208-04)

Binary data 720289.prm...

Rockwell Automation Stratix 5900 Services Router < 15.6.3 Improper Input Validation, Authentication and Path Traversal (ICSA-17-094-04)

Binary data 720283.prm...

PT-2019-13185 · No Company · Stb Vorbis

Name of the Vulnerable Software and Affected Versions: stb vorbis versions through 2019-03-04 Description: The issue allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file, due to a division by zero in the predict point function. Recommendations: For versions through...

PT-2019-13188 · Stb · Stb Vorbis

Name of the Vulnerable Software and Affected Versions: stb vorbis versions through 2019-03-04 Description: A stack buffer overflow in the compute codewords function allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file. Recommendations: For...

Sean Barrett stb_vorbis Number Error Vulnerability

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. Sean Barrett stbvorbis A numeric error vulnerability exists in the 'predictpoint' function in versions 2019-03-04 and earlier. The vulnerability stems from a networked system or product not properly calculating or...

Solaris 10 (sparc) : 144994-04

SunOS 5.10: Ant patch. Date this patch was last updated by Sun : Jul/10/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid126615; scriptversion"1.2"; scriptcvsdate"Date: 2020/01/07...

Solaris 10 (x86) : 144995-04

SunOS 5.10x86: Ant patch. Date this patch was last updated by Sun : Jul/10/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid126616; scriptversion"1.2"; scriptcvsdate"Date:...