Hacking Printers Advisory 2

TL;DR: In the scope of academic research on printer security, various vulnerabilities in network printers and MFPs have been discovered. This is advisory 2 of 6 of the Hacking Printers' series. Each advisory discusses multiple issues of the same category. This post is about accessing a printers...

chromium-browser: unauthorised file access in devtools

Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page...

WordPress Simply Poll 1.4.1 SQL Injection

Exploit Title: Simply Poll 1.4.1 Plugin for WordPress A SQL Injection Date: 21/12/2016 Exploit Author: TAD GROUP Vendor Homepage: https://wordpress.org/plugins/simply-poll/ Software Link: https://wordpress.org/plugins/simply-poll/ Contact: [email protected] Website: http://tad.bg Category: Web...

SAP NetWeaver Security Bypass Vulnerability (CNVD-2016-13027)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver, which can be exploited by an attacker to bypass securit...

Design/Logic Flaw

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951...

Multiple Emerson Product Security Bypass Vulnerabilities

The Emerson SE4801T0X Redundant Wireless I/O Card and the SE4801T1X Simplex Wireless I/O Card are Emerson Electric's suite of wireless I/O cards for connecting workstations and servers in DeltaV software for process control networks. workstations and servers in a DeltaV software for process contr...

Siemens SICAM PAS Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-336-01 Siemens SICAM PAS Vulnerabilities that was published December 1, 2016, on the NCCIC/ICS-CERT web site. Siemens has released an advisory to inform its users on how to mitigate vulnerabilities that affect...

The vulnerability of the Linux operating system allows a hacker to obtain information about access restrictions for file system objects.

The vulnerability of the Linux operating system’s kernel is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to obtain information about the access restrictions for file system objects. This is because requests to resources prohibited to users...

openSUSE Security Update : ghostscript-library (openSUSE-2016-1207)

This update for ghostscript-library fixes the following issues : - Multiple security vulnerabilities have been discovered where ghostscript's '-dsafer' flag did not provide sufficient protection against unintended access to the file system. Thus, a machine that would process a specially crafted...

WordPress Plugin CYSTEME Finder 1.3 - Arbitrary File DisclosureArbitrary File Upload

WordPress Plugin CYSTEME Finder 1.3 - Arbitrary File DisclosureArbitrary File Upload Exploit Title: WordPress CYSTEME Finder Plugin 1.3 - Arbitrary File Dislcosure/Arbitrary File Upload Link: https://wordpress.org/plugins/cysteme-finder/ Version: 1.3 Date: August 23rd 2016 Exploit Author: T0w3ntu...

SAP TREX Arbitrary File Modification Vulnerability

SAP TREX is a search engine from SAP for the SAP NetWeaver integrated technology platform. An arbitrary file modification vulnerability exists in SAP TREX, which can be exploited by a remote attacker to read and write arbitrary files on the file system...

IBM Security Privileged Identity Manager Virtual Appliance Arbitrary File Modification Vulnerability

IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM USA, that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security...

SAP NetWeaver AS Java 7.5 XXE in com.sap.km.cm.ice

Application: SAP NetWeaver AS Java Versions Affected: SAP NetWeaver AS Java 7.5 Vendor URL: SAP Bugs: XXE Reported: 17.06.2016 Vendor response: 18.06.2016 Date of Public Advisory: 11.04.2017 Reference: SAP Security Note 2387249 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: XXE...

Poweramp Standard Widget Pack - Dangerous filesystem permissions, Exported components, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Poweramp Standard Widget Pack published at the 'play' market has multiple vulnerabilities...

XStream XML External Entity Vulnerability

XStream is a lightweight , easy to use open source Java class library developed by the XStream team , it is mainly used to serialize objects into XML JSON or deserialize objects. An XML external entity vulnerability exists in XStream version 1.4.9, which stems from the parser in the program...

SQLMap - Automatic SQL Injection And Database Takeover Tool

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lastin...

The vulnerability of the Windows operating system, which allows a hacker to circumvent access restrictions to the file system

The vulnerability of the Windows operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent restrictions on access to the file system locally...

MGASA-2015-0444 Updated flash-player-plugin packages fix security vulnerability

Adobe Flash Player 11.2.202.548 contains fixes to critical security vulnerabilities found in earlier versions that could potentially allow an attacker to take control of the affected system. This update resolves a type confusion vulnerability that could lead to code execution CVE-2015-7659. This...

The vulnerability of the iOS operating system, which allows a hacker to circumvent access restrictions to file system objects

The vulnerability of the AppleFileConduit component in the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass access restrictions to file system objects by manipulating symbolic links...

Apple iOS AirTraffic Directory Traversal Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS AirTraffic, which allows malicious applications to exploit the vulnerability to access protected portions of the file system...