MacOS X #TimeMachine - (tmdiagnose) Command Injection Privilege Escalation Exploit #RCE

Exploit for macOS platform in category local exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mac OS X TimeMachine tmdiagnose Command Injection Privilege Escalation', 'Description' = %q...

Mac OS X TimeMachine (tmdiagnose) Command Injection Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mac OS X TimeMachine tmdiagnose Command Injection Privilege Escalation', 'Description' = %q This module exploits a command injection in TimeMachi...

Mac OS X TimeMachine (tmdiagnose) Command Injection Privilege Escalation

This module exploits a command injection in TimeMachine on macOS 'Mac OS X TimeMachine tmdiagnose Command Injection Privilege Escalation', 'Description' = %q This module exploits a command injection in TimeMachine on macOS = 10.14.3 in order to run a payload as root. The tmdiagnose binary on OSX ...

CVE-2019-8513

creationtimestamp| type| source ---|---|--- 2019-04-13 18:51:06+00:00| published-proof-of-concept| https://t.me/antichat/4432 2019-04-13 20:10:59+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5400 2019-06-29 10:52:23+00:00| seen|...

CVE-2018-8513

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8505,...

CVE-2018-8513

CVE-2018-8513 concerns a remote code execution vulnerability in the Chakra scripting engine’s handling of in-memory objects, affecting Microsoft Edge and ChakraCore. The root cause is memory handling in Chakra’s object model that can be exploited to execute arbitrary code. The CVSS assessment in ...

CVE-2016-8513

CVE-2016-8513 describes a CSRF vulnerability in HPE Version Control Repository Manager (VCRM) affecting all versions prior to 7.6. A remote attacker could exploit this by convincing a user to follow a crafted link or HTML page to perform unauthorized actions. The vulnerability’s impact is indicat...

CVE-2016-8513

A Cross-Site Request Forgery CSRF vulnerability in HPE Version Control Repository Manager VCRM was found. The problem impacts all versions prior to 7.6...

CVE-2017-8513

CVE-2017-8513 is a remote code execution vulnerability in Microsoft PowerPoint (Office suite) caused by improper handling of objects in memory. CVSSv3 base score 7.8 (HIGH) with local attack vector, user interaction required. MITRE/attack details are not specified in the provided documents, and e...

Microsoft PowerPoint Remote Code Execution Vulnerability (KB3127888)

This host is missing an important security update according to Microsoft KB3127888 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

KLA11049 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions and spoof user interface. Below is a complete list of vulnerabilities: 1. An improper validating of input before loading...

CVE-2015-8513

...

CVE-2015-8513

CVE-2015-8513 is rejected/not used per the initial description.

HP Version Control Repository Manager < 7.6.0 Multiple Vulnerabilities

According to its self-reported version, the HP Version Control Repository Manager VCRM application installed on the remote Windows host is prior to 7.6.0. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in OpenSSL in x509vfy.c due to improper...

HP Version Control Repository Manager for Linux < 7.6.0 Multiple Vulnerabilities

According to its self-reported version, the HP Version Control Repository Manager VCRM application installed on the remote Linux host is prior to 7.6.0. It is, therefore, affected by multiple vulnerabilities : - A cross-site request forgery XSRF vulnerability exists in VCRM due to HTTP requests n...

CVE-2014-8513

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8514 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

Buffer overflow

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

Buffer overflow

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8513 and CVE-2014-8514. NOTE: this may be clarified later based on details provided b...

CVE-2014-8513

Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-8514 and CVE-2014-9188. NOTE: this may be clarified later based on details provided b...

CVE-2014-8513

CVE-2014-8513 affects Schneider Electric ProClima (ActiveX control MDraw30.ocx) with a buffer overflow vulnerability in ProClima before 6.1.7 that allows remote code execution via unspecified vectors. The issue is distinct from CVE-2014-8514 and CVE-2014-9188. Remediation guidance in the sources ...