6008 matches found
FreeBSD-SA-19:02.fd - Privilege Escalation
FreeBSD-SA-19:02.fd - Privilege Escalation Exploit: FreeBSD-SA-19:02.fd - Privilege Escalation Date: 2019-12-30 Author: Karsten König of Secfault Security Twitter: @gr4yf0x Kudos: Maik, greg and Dirk for discussion and inspiration CVE: CVE-2019-5596 libmap.conf primitive inspired by kcope's 2005...
Reptile Rootkit - reptile_cmd Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reptile Rootkit reptilecmd Privilege Escalation', 'Description' = %q This module uses Reptile rootkit's reptilecmd backdoor executable to gain ro...
FreeBSD-SA-19:02.fd - Privilege Escalation
Exploit: FreeBSD-SA-19:02.fd - Privilege Escalation Date: 2019-12-30 Author: Karsten König of Secfault Security Twitter: @gr4yf0x Kudos: Maik, greg and Dirk for discussion and inspiration CVE: CVE-2019-5596 libmap.conf primitive inspired by kcope's 2005 exploit for Qpopper !/bin/sh echo "+ Root...
OpenNetAdmin 18.1.1 - Command Injection Exploit #RCE
Exploit for php platform in category web applications class MetasploitModule 'OpenNetAdmin Ping Command Injection', 'Description' = %q This module exploits a command injection in OpenNetAdmin between 8.5.14 and 18.1.1. , 'Author' = 'mattpascoe', Vulnerability discovery 'Onur ER ' Metasploit modul...
OpenNetAdmin 18.1.1 - Command Injection Exploit (Metasploit)
class MetasploitModule 'OpenNetAdmin Ping Command Injection', 'Description' = %q This module exploits a command injection in OpenNetAdmin between 8.5.14 and 18.1.1. , 'Author' = 'mattpascoe', Vulnerability discovery 'Onur ER ' Metasploit module , 'References' = 'EDB', '47691' , 'DisclosureDate' =...
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack Exploit
// Axel '0vercl0k' Souchet - November 19 2019 // EDB Note: Download https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47752.zip // 0:000 ? xul!sAutomationPrefIsSet - xul // Evaluate expression: 85724947 = 00000000051c0f13 const XulsAutomationPrefIsSet = 0x051c0f13...
Centreon Cross-Site Scripting Vulnerability (CNVD-2019-46409)
Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A cross-site scripting vulnerability exists in Centreon versions prior to 2.8.30, 18.x...
CVE-2019-16195
Centreon (Merethis Centreon) is vulnerable to Cross-Site Scripting via the myAccount alias and name fields in versions prior to: 2.8.30, 18.x prior to 18.10.8, and 19.x prior to 19.04.5. The root cause is a lack of proper validation of client-side data by the WEB application, enabling XSS payload...
CVE-2019-14818
A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhostuser socket, can send specially crafted VRINGSETNUM messages, resulting in a memory leak including file...
CVE-2019-14818
The CVE-2019-14818 issue affects DPDK packages in multiple lines: 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4, and 19.x.x before 19.08.1. A malicious master or a container with access to a vhost_user socket can send crafted VRING_SET_NUM messages, causing a memory leak th...
CVE-2019-0154
creationtimestamp| type| source ---|---|--- 2019-11-12 23:17:42+00:00| seen| https://t.me/antichat/7025 2019-11-13 14:55:03+00:00| seen| https://t.me/alexmakus/3138 2024-02-14 10:56:50+00:00| seen| https://t.me/ctinow/184537 2026-03-19 00:00:00+00:00| seen|...
Stored XSS in field name data model
Summary An attacker with admin access to the appliance can inject malicious code that will later be executed by another legitimate users. This allows an attacker to perform unauthorized actions on behalf of legitimate users. JavaScript injection was possible using the field name when adding new...
Siemens IE/WSN-PA Link WirelessHART Gateway Cross-site Scripting (ICSA-19-253-04)
Binary data 720317.prm...
Siemens SIMATIC WinAC RTX 2010 Uncontrolled Resource Consumption (ICSA-19-281-03)
Binary data 720315.prm...
Siemens PROFINET Devices Uncontrolled Resource Consumption (ICSA-19-283-02)
Binary data 720313.prm...
Siemens Industrial Products Integer Overflow or Wraparound or Uncontrolled Resource Consumption (ICSA-19-253-03)
Binary data 720312.prm...
Siemens CP, SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM Out-of-bounds Read (ICSA-19-099-06)
Binary data 720311.prm...
Siemens SIMATIC PCS7 < V9.1 and TIA Portal < 15.2 Unrestricted Upload of File with Dangerous Type (ICSA-19-192-02)
Binary data 720309.prm...
Solaris 10 (x86) : 119758-44
SunOS 5.10x86: Samba patch. Date this patch was last updated by Sun : Oct/14/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'compat.inc'; if description scriptid129873; scriptversion"1.4";...