Bomgar Remote Support - Unauthenticated Code Execution (Metasploit)

Exploit for linux platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Bomgar Remote Support Unauthenticated Code Execution', 'Description' = %q Thi...

Bomgar Remote Support Unauthenticated Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Bomgar Remote Support Unauthenticated Code Execution', 'Description' = %q This module exploits a vulnerability in the Bomgar Remote...

Adobe Acrobat Multiple Vulnerabilities - 01 (Jan 2016) - Mac OS X

Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...

CVE-2016-0935

CVE-2016-0935 is a double-free vulnerability in Adobe Reader and Acrobat allowing remote code execution via a crafted ExtGState dictionary. Affected products include Adobe Reader and Acrobat before 11.0.14, Acrobat/Reader DC Classic before 15.006.30119, and Acrobat/Reader DC Continuous before 15....

Adobe Reader < 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02)

The version of Adobe Reader installed on the remote Windows host is a version prior to 15.006.30119 or 15.010.20056. It is, therefore, affected by multiple vulnerabilities. - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acroba...

CVE-2015-0935

Bomgar Remote Support prior to 15.1.1 is vulnerable to arbitrary PHP code execution via crafted serialized data that is deserialized by the application. The root cause is improper handling of untrusted serialized input (PHP unserialize) in the Bomgar portal, enabling an attacker to execute code i...

CVE-2014-0935

CVE-2014-0935 affects IBM Smart Analytics System 7700 (before FP 2.1.3.0) and 7710 (before FP 2.1.3.0). The vulnerability is described as an unspecified local privilege escalation via vectors related to events. The connected documentation provides affected versions but does not supply concrete ro...

CVE-2013-0935

EMC Smarts Network Configuration Manager (NCM) before version 9.2 is affected by CVE-2013-0935. The issue: Java RMI method calls can be invoked without authentication, allowing remote attackers to execute arbitrary code. Severity in NVD is high (CVSSv2 base score 9.3) with network access and no a...

CVE-2012-0935

CVE-2012-0935 describes a SQL injection vulnerability in Aryadad CMS, exploitable via the PageID parameter in Default.aspx. The issue allows remote attackers to execute arbitrary SQL commands, with impact per the NVD vector: AV:N/AC:L/Au:N/C:P/I:P/A:P, base score 7.5 (HIGH). Public references (Ex...

CVE-2011-0935

Cisco IOS 15.0/15.1 PKI can permanently cache certain public keys, allowing remote attackers to bypass authentication through an IKE peer relationship where a previously valid key was later revoked. This is described as Bug CSCth82164 and is a separate issue from CVE-2010-4685. The available docu...

CVE-2008-0935

creationtimestamp| type| source ---|---|--- 2010-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16514 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/novelliprintexecuterequest.rb 2025-02-06...

CVE-2010-0935

Perforce Server 2009.2 and earlier allows remote authenticated users to obtain super privileges via a “p4 protect” command when the protection table is empty. Root cause: empty protection table enables privilege escalation. Impact: potential full administrative access. No remediation or patch det...

CVE-2009-0935

The inotifyread function in the Linux kernel 2.6.27 to 2.6.27.13, 2.6.28 to 2.6.28.2, and 2.6.29-rc3 allows local users to cause a denial of service OOPS via a read with an invalid address to an inotify instance, which causes the device's event list mutex to be unlocked twice and prevents proper...

CVE-2009-0935

CVE-2009-0935 affects Linux kernel inotify_read across 2.6.27–2.6.27.13, 2.6.28–2.6.28.2, and 2.6.29-rc3. The issue allows local users to trigger a denial of service (OOPS) by reading with an invalid address to an inotify instance, causing the event list mutex to be unlocked twice and preventing ...

Novell iPrint Client ienipp.ocx ActiveX Control Stack-based Buffer Overflow (CVE-2008-0935)

Novell iPrint is an application that enables users to install and manage printers, or submit print job from a web browser. A buffer overflow vulnerability has been reported in Novell iPrint Client for Windows. The vulnerability is due to a boundary error in a Novell iPrint ActiveX control. To...

Novell iPrint Control ActiveX control ExecuteRequest buffer overflow

Added: 03/11/2008 CVE: CVE-2008-0935 BID: 27939 OSVDB: 42063 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in the ExecuteReque...

Novell iPrint Control ActiveX control ExecuteRequest buffer overflow

Added: 03/11/2008 CVE: CVE-2008-0935 BID: 27939 OSVDB: 42063 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability in the ExecuteReque...

DSquare Exploit Pack: D2SEC_IPRINT

Name| d2seciprint ---|--- CVE| CVE-2008-0935 Exploit Pack| D2ExploitPack Description| Novell iPrint Client ienipp.ocx ActiveX Stack Overflow Notes|...

CVE-2008-0935

CVE-2008-0935 describes a stack-based buffer overflow in the Novell iPrint Client’s iPrint Control ActiveX (ienipp.ocx). An overly long argument to ExecuteRequest() can allow a remote attacker to execute arbitrary code. Affected product/version: Novell iPrint Client before 4.34 (ActiveX control i...

CVE-2006-0935

Microsoft Word 2003 is reported vulnerable to a denial of service via a crafted file (as demonstrated by 101_filefuzz). The vulnerability allows remote attackers to crash the application, implying partial availability impact. The available documents identify Word 2003 as affected and describe the...