4675 matches found
h1-ctf: [H1-2006 2020] CTF writeup
Context Well, against all expectations you finally get it, you got the flag! Let's go back in time to remember how. --- Twitter Once upon a time As always the CTF starts with a tweet: F855948 --- Subdomains According to the policy page, .bountypay.h1ctf.com is in scope. You decide to scan...
Cisco Firepower Management Center Arbitrary Log File Write Vulnerability (cisco-sa-alfo-tHwFDmTE)
According to its self-reported version, Cisco Firepower Management Center is affected by an arbitrary file write vulnerability due to insufficient user input validation. An unauthenticated, remote attacker can exploit this to write arbitrary entries in the application's log file on the remote hos...
Exploit for Out-of-bounds Write in Php
This is an exploit module for a bug in php-fpm CVE-2019-11043. The bug is possible to trigger from the outside in certain nginx + php-fpm configurations, allowing a web user to execute code if the vulnerable configuration is present. The exploit targets PHP 7+ and works by appending a specially...
The vulnerability of the Windows Common Log File System (CLFS) driver in the Windows operating system allows a hacker to escalate their privileges or execute arbitrary code.
The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code through a specially created application...
CVE-2020-1154
An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'...
CVE-2020-1154
An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'...
CVE-2020-1154
An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'...
CVE-2020-9045
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation...
CVE-2020-9045
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation...
Information disclosure
During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation...
PT-2020-20458 · Software House +1 · Software House Ccure 9000 +1
Name of the Vulnerable Software and Affected Versions: Software House C•CURE 9000 version 2.70 American Dynamics victor Video Management System version 5.2 Description: The issue concerns the logging of user credentials during the installation or upgrade process. When installing or upgrading to t...
NukeViet VMS 4.4.00 - Cross-Site Request Forgery (Change Admin Password) Vulnerability
Exploit for php platform in category web applications Exploit Title: NukeViet VMS 4.4.00 - Cross-Site Request Forgery Change Admin Password Exploit Author: JEBARAJ Vendor Homepage: https://nukeviet.vn/ Software Link:...
EAP: Vault system property security attribute value is revealed on CLI 'reload' command
A flaw was found in the JBoss EAP Vault system. Confidential information of the system property’s security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information...
Exploit for Insertion of Sensitive Information into Log File in Canonical Subiquity
CVE-2020-11932 :bug::mag: Check CVE-2020-11932 and test for h...
EAP: Vault system property security attribute value is revealed on CLI 'reload' command
A flaw was found in the JBoss EAP Vault system. Confidential information of the system property’s security attribute value is revealed in the JBoss EAP log file when executing a JBoss CLI 'reload' command. This flaw can lead to the exposure of confidential information...
Palo Alto Networks PAN-OS Injection Vulnerability
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An injection vulnerability exists in Palo Alto Networks PAN-OS that can be exploited by a remote attacker to write a message in the ms.log file...
Microsoft Windows Multiple Vulnerabilities (KB4556813)
This host is missing a critical security update according to Microsoft KB4556813 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KLA11777 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of...
CVE-2020-5837
Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege...