98 matches found
Buffer overflow
An issue was discovered in CloudMe 1.11.0. An unauthenticated local attacker that can connect to the "CloudMe Sync" client application listening on 127.0.0.1 port 8888 can send a malicious payload causing a buffer overflow condition. This will result in code execution, as demonstrated by a TCP...
CloudMe Sync 1.9.2 Remote Buffer Overflow Exploit
Exploit for windows platform in category remote exploits !/usr/bin/python CloudMe Sync 1.9.2 Remote Exploit Written by r00tpgp @ http://www.r00tpgp.com Usage: python CloudMe-1.9.2-Exploit.py Spawns reverse meterpreter LHOST=192.168.0.68 LPORT=1990 CVE: CVE-2018-6892 CloudMe Installer:...
CloudMe Sync 1.9.2 Remote Buffer Overflow
!/usr/bin/python CloudMe Sync 1.9.2 Remote Exploit Written by r00tpgp @ http://www.r00tpgp.com Usage: python CloudMe-1.9.2-Exploit.py Spawns reverse meterpreter LHOST=192.168.0.68 LPORT=1990 CVE: CVE-2018-6892 CloudMe Installer: https://org.cloudme.com/en/sync Tested on Windows 7 32b SP1 import...
CloudMe Sync 1.10.9 Buffer Overflow
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CloudMe Sync v1.10.9', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in CloudMe Sync v1.10.9 client...
CloudMe Sync 1.10.9 Buffer Overflow Exploit
This Metasploit module exploits a stack-based buffer overflow vulnerability in the CloudMe Sync version 1.10.9 client application. This Metasploit module has been tested successfully on Windows 7 SP1 x86. This module requires Metasploit: https://metasploit.com/download Current source:...
CloudMe Unauthenticated Remote Buffer Overflow(CVE-2018-6892)
The following advisory describes one 1 vulnerability found in CloudMe. CloudMe is “a file storage service operated by CloudMe AB that offers cloud storage, file synchronization and client software. It features a blue folder that appears on all devices with the same content, all files are...
CloudMe Sync v1.10.9
This module exploits a stack-based buffer overflow vulnerability in CloudMe Sync v1.10.9 client application. This module has been tested successfully on Windows 7 SP1 x86. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewo...
CVE-2018-6892
creationtimestamp| type| source ---|---|--- 2018-02-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44027 2018-02-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44175 2018-05-29 15:50:33+00:00| seen|...
CVE-2018-6892
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's executi...
CVE-2018-6892
CloudMe Sync (v1.11.2) is affected by CVE-2018-6892: an unauthenticated attacker can connect to the Sync client on TCP port 8888 and trigger a buffer overflow that allows arbitrary code execution. Public exploits demonstrate SEH/ROP techniques (including DEP/ASLR bypass) against Windows targets. ...
openSUSE Security Update : libsndfile (openSUSE-2018-140)
This update for libsndfile fixes the following issues : - CVE-2017-16942: Divide-by-zero in the function wavw64readfmtchunk, which may lead to Denial of service bsc1069874. - CVE-2017-6892: Fixed an out-of-bounds read memory access in the aiffreadchanmap bsc1043978. - CVE-2017-14634: In libsndfil...
SUSE SLED12 / SLES12 Security Update : libsndfile (SUSE-SU-2018:0352-1)
This update for libsndfile fixes the following issues : - CVE-2017-16942: Divide-by-zero in the function wavw64readfmtchunk, which may lead to Denial of service bsc1069874. - CVE-2017-6892: Fixed an out-of-bounds read memory access in the aiffreadchanmap bsc1043978. - CVE-2017-14634: In libsndfil...
Fedora 26 : libsndfile (2017-9b932ec622)
fix CVE-2017-6892 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora Update for libsndfile FEDORA-2017-708adeb9b6
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for libsndfile FEDORA-2017-2cfb239358
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 25 : libsndfile (2017-708adeb9b6)
fix CVE-2017-6892 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Updated libsndfile packages fix security vulnerability
In libsndfile, an error in the "aiffreadchanmap" function aiff.c can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file CVE-2017-6892...
libsndfile 1.0.28 aiff_read_chanmap() Information Disclosure Vulnerability
A vulnerability in libsndfile 1.0.28, caused due to an error in the"aiffreadchanmap" function src/aiff.c, can be exploited tocause an out-of-bounds read memory access via a specially crafted AIFFfile. libsndfile "aiffreadchanmap" Information Disclosure Vulnerability Table of Contents Affected...
CVE-2017-6892
CVE-2017-6892 affects libsndfile 1.0.28, with an out-of-bounds read in aiff_read_chanmap() (aiff.c) triggered by a specially crafted AIFF file. Several advisories confirm a patched release is available; vendors (Debian, Gentoo, Mageia, Fedora, etc.) require upgrading libsndfile to include the fix...