Delta Industrial Automation CNCSoft

1. EXECUTIVE SUMMARY CVSS v3 4.4 ATTENTION: Low skill level to exploit Vendor: Delta Electronics Delta Equipment: Delta Industrial Automation CNCSoft Vulnerability: Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a buffer overflow condition that may...

Fedora 29 : libtiff (2019-c83703be82)

Fix for CVE-2019-7663. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

Master IP CAM 01 3.3.4.2103 Remote Command Execution

Exploit Title: Master IP CAM 01 Remote Command Execution Date: 09-02-2019 Remote: Yes Exploit Authors: Raffaele Sabato Contact: https://twitter.com/syrion89 Vendor: Master IP CAM Version: 3.3.4.2103 CVE: CVE-2019-8387 import sys import requests if lensys.argv " print "- Example: python...

Jinja2 2.10 Command Injection

''' Exploit Title: Jinja2 Command injection fromstring function Date: date Exploit Author: JameelNabbo Website: Ordina.nl Vendor Homepage: http://jinja.pocoo.org Software Link: https://pypi.org/project/Jinja2/files Version: 2.10 Tested on: Kali Linux CVE-2019-8341 // fromstring function is prone ...

Google Chrome < 72.0.3626.96 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 72.0.3626.96. It is, therefore, affected by a vulnerability as referenced in the 201902stable-channel-update-for-desktop advisory. - Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allow...

Google Chrome < 72.0.3626.96 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 72.0.3626.96. It is, therefore, affected by a vulnerability as referenced in the 201902stable-channel-update-for-desktop advisory. - Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed...

exacqVision ESM 5.12.2 - Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits...

snapd < 2.37 (Ubuntu) - dirty_sock Local Privilege Escalation (1)

Exploit for linux platform in category local exploits...

Microsoft Edge CVE-2019-0648 Information Disclosure Vulnerability

Description Microsoft Edge is prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Edge Recommendations Run all software as a nonprivileged user with minimal acce...

Microsoft SharePoint Server CVE-2019-0594 Remote Code Execution Vulnerability

Description Microsoft SharePoint Server is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft SharePoint Enterprise Server 2016...

Amazon Linux AMI : docker (ALAS-2019-1156)

A vulnerability was discovered in runc, which is used by Docker to run containers. runc did not prevent container processes from modifying the runc binary via /proc/self/exe. A malicious container could replace the runc binary, resulting in container escape and privilege escalation. This was fixe...

Microsoft Edge CVE-2019-0643 Information Disclosure Vulnerability

Description Microsoft Edge is prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Edge Recommendations Run all software as a nonprivileged user with minimal acce...

Fedora 28 : 1:libreoffice (2019-cf9ddf9fff)

CVE-2018-16858 Directory traversal flaw in script execution Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

Samba < 2.2.8a Remote Code Execution Vulnerability

The version of Samba running on the remote host is prior to 2.2.8a. It is, therefore, affected by a remote code execution vulnerability in the SMB/CIFS packet fragment re-assembly code in smbd. An unauthenticated, remote attacker can exploit this to inject binary specific exploit code into smbd a...

Photon OS 1.0: Binutils PHSA-2017-0010

An update of the binutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0010. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121676;...

Photon OS 1.0: Libxml2 PHSA-2017-0024

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0024. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121711;...

Photon OS 2.0: Perl PHSA-2018-2.0-0084

An update of the perl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0084. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121982;...

Photon OS 2.0: Net PHSA-2019-2.0-0118

An update of the net package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0118. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid122025;...

Photon OS 2.0: Patch PHSA-2018-2.0-0049

An update of the patch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121948...

Photon OS 1.0: Libxml2 PHSA-2017-0029

An update of the libxml2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0029. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121723;...