43 matches found
PT-2026-43056
Name of the Vulnerable Software and Affected Versions 10-Strike Network Scanner version 3.0 Description A local buffer overflow exists in the host name field, which allows attackers to bypass SafeSEH Structured Exception Handler protections and execute arbitrary code. Attackers can achieve this b...
CVE-2018-25345: Buffer Copy without Checking Size of Input
10-Strike Network Scanner 3.0 contains a local buffer overflow vulnerability in the host name field that allows attackers to bypass SafeSEH protections and execute arbitrary code. Attackers can craft a malicious payload in the host name or address field and trigger the vulnerability through the...
PT-2026-43055
Name of the Vulnerable Software and Affected Versions 10-Strike Network Inventory Explorer version 8.54 Description A stack-based buffer overflow exists in the registration key input field. This allows local attackers to execute arbitrary code with application privileges by triggering a structure...
CVE-2018-25344: Stack-based Buffer Overflow
10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field that allows local attackers to execute arbitrary code by triggering a structured exception handler overwrite. Attackers can craft a malicious registration key string...
CVE-2018-25255: Out-of-bounds Write
10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that...
CVE-2020-37142: Stack-based Buffer Overflow
10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting SEH records. Attackers can craft a malicious payload targeting the 'Computer' parameter during the 'Add' function to trigg...
CVE-2020-37138: Stack-based Buffer Overflow
10-Strike Network Inventory Explorer 9.03 contains a buffer overflow vulnerability in the file import functionality that allows remote attackers to execute arbitrary code. Attackers can craft a malicious text file with carefully constructed payload to trigger a stack-based buffer overflow and...
CVE-2020-37043: Buffer Copy without Checking Size of Input
10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling...
CVE-2020-37021: Unquoted Search Path or Element
10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local attackers to escalate privileges. Attackers can place a malicious executable in specific file path locations to achieve privilege escalation to SYSTEM during service startup...
CVE-2020-36961: Stack-based Buffer Overflow
10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code...
CVE-2021-47772: Out-of-bounds Write
10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the...
CVE-2021-47767: Unquoted Search Path or Element
10-Strike Network Inventory Explorer Pro 9.31 contains an unquoted service path vulnerability in the srvInventoryWebServer service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in potential path segments to achieve privilege escalati...
EUVD-2018-17779
Malware in sbrugna...
CVE-2022-38573
CVE-2022-38573 affects 10-Strike Network Inventory Explorer v9.3, where a buffer overflow is triggered via the Add Computers function. The issue has a CVSS v3.1 base score of 9.8 (CRITICAL), with network access, no privileges required, and no user interaction required. Impact is rated HIGH on con...
PT-2022-24465 · 10 Strike · 10-Strike Network Inventory Explorer
Name of the Vulnerable Software and Affected Versions: 10-Strike Network Inventory Explorer version 9.3 Description: A buffer overflow issue was discovered in the Add Computers function of the software. Recommendations: For version 9.3, consider disabling the Add Computers function until a patch ...
CVE-2022-38573: Buffer Copy without Checking Size of Input
10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function...
10-Strike Network Inventory Explorer 9.3 Buffer Overflow
I. VULNERABILITY ------------------------- 10-Strike Network Inventory Explorer Version 9.3 - Privilege Escalation through SEH based Buffer Overflow II. VENDOR ------------------------- 10-Strike Network https://www.10-strike.com/ III. DESCRIPTION ------------------------- 10-Strike Network...
10-Strike Network Inventory Explorer 9.3 Buffer Overflow Vulnerability
10-Strike Network Inventory Explorer versions 9.3 and below are vulnerable to a SEH based buffer overflow which leads to code execution or local privilege escalation. The vulnerable part of the program is the functionality to add computers from a text file. I. VULNERABILITY...
10-Strike Network Inventory Explorer Pro 9.31 Unquoted Service Path
Exploit Title: 10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path Discovery by: Brian Rodriguez Date: 04-11-2021 Vendor Homepage: https://www.10-strike.com/ Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-pro-setup.exe...
10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow (SEH)
Exploit Title: 10-Strike Network Inventory Explorer Pro 9.31 - Buffer Overflow SEH Date: 2021-10-31 Exploit Author: ro0k Vendor Homepage: https://www.10-strike.com/ Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-pro-setup.exe Version: 9.31 Tested on: Windows 1...