WebExec Authenticated User Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Windows XP systems that are not part of a domain default to treating all network logons as if they were Guest. This prevents SMB relay attacks from gaining administrativ...

WebExec Authenticated User Code Execution

This module uses a valid username and password of any level or password hash to execute an arbitrary payload. This module is similar to the "psexec" module, except allows any non-guest account by default. Module Options msf use exploit/windows/smb/webexec msf undefinedwebexec show actions...

SUSE SLES12 Security Update : ntp (SUSE-SU-2018:3351-1)

NTP was updated to 4.2.8p12 bsc1111853 : CVE-2018-12327: Fixed stack-based buffer overflow in the openhost command-line call of NTPQ/NTPDC. bsc1098531 CVE-2018-7170: Add further tweaks to improve the fix for the ephemeral association time spoofing additional protection bsc1083424 Please also see...

QLogic QConvergeConsole (QCC) GUI Web Interface Default Credentials

The remote device appears to be running QLogic QConvergeConsole which contains a web interface with default credentials enabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid118331; scriptversion"1.1"; scriptcvsdate"Date: 2018/10/24 10:33:48";...

Ubuntu 18.10 : Tex Live-bin vulnerability (USN-3788-2)

USN-3788-1 fixed vulnerabilities in Tex Live. This update provides the corresponding update for Ubuntu 18.10 It was discovered that Tex Live incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. CVE-2018-17407. Note that Tenable Network Security h...

SUSE SLES11 Security Update : ghostscript-library (SUSE-SU-2018:3330-1)

This update for ghostscript-library fixes the following issues : CVE-2018-16511: A type confusion in 'ztype' could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact. bsc1107426 CVE-2018-16540: Attackers able to supply...

SUSE SLES11 Security Update : postgresql94 (SUSE-SU-2018:3287-1)

This update for postgresql94 fixes the following issues : postgresql was updated to 9.4.19 : https://www.postgresql.org/docs/current/static/release-9-4-19.html - CVE-2018-10915, bsc1104199: Fix failure to reset libpq's state fully between connection attempts. postgresql was updated to 9.4.18 :...

Ubuntu 18.10 : Requests vulnerability (USN-3790-2)

USN-3790-1 fixed vulnerabilities in Requests. This update provides the corresponding update for Ubuntu 18.10 It was discovered that Requests incorrectly handled certain HTTP headers. An attacker could possibly use this issue to access sensitive information. Note that Tenable Network Security has...

Ubuntu 18.10 : libssh vulnerability (USN-3795-2)

USN-3795-1 fixed a vulnerability in libssh. This update provides the corresponding update for Ubuntu 18.10. Peter Winter-Smith discovered that libssh incorrectly handled authentication when being used as a server. A remote attacker could use this issue to bypass authentication without any...

Fedora 27 : git (2018-d5139c4fd6)

Upstream security update resolving an issue with git clone --recurse-submodules. From the upstream release announcement : These releases fix a security flaw CVE-2018-17456, which allowed an attacker to execute arbitrary code by crafting a malicious .gitmodules file in a project cloned with...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2018:2839-2)

This update for java-180-ibm to 8.0.5.20 fixes the following security issues : CVE-2018-2952: Vulnerability in subcomponent: Concurrency. Difficult to exploit vulnerability allowed unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit...

SUSE SLES12 Security Update : xen (SUSE-SU-2018:2410-2) (Foreshadow)

This update for xen fixes the following security issues : CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS...

SUSE SLES12 Security Update : glibc (SUSE-SU-2018:1562-2)

This update for glibc fixes the following issues : CVE-2017-18269: Fix SSE2 memmove issue when crossing 2GB boundary bsc1094150 CVE-2018-11236: Fix overflow in path length computation bsc1094161 CVE-2018-11237: Don't write beyond buffer destination in mempcpyavx512novzeroupper bsc1094154 Non...

SUSE SLES12 Security Update : gpg2 (SUSE-SU-2018:1698-2)

This update for gpg2 fixes the following security issue : CVE-2018-12020: GnuPG mishandled the original filename during decryption and verification actions, which allowed remote attackers to spoof the output that GnuPG sends on file descriptor 2 to other programs that use the '--status-fd 2' opti...

Debian DLA-1549-1 : xen security update

Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations leaks or privilege escalation. For Debian 8 'Jessie', these problems have been fixed in version 4.4.4lts2-0+deb8u1. We recommend that you upgrade your xen packages. NOTE:...

SUSE SLED12 / SLES12 Security Update : fuse (SUSE-SU-2018:3219-1)

This update for fuse fixes the following security issue : CVE-2018-10906: fusermount was vulnerable to a restriction bypass when SELinux is active. This allowed non-root users to mount a FUSE file system with the 'allowother' mount option regardless of whether 'userallowother' is set in the fuse...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:3191-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069...

Wireshark 2.6.x < 2.6.4 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.6.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.6.4 advisory. - In Wireshark 2.6.0 to 2.6.3, the Steam IHS Discovery dissector could consume system memory. This was addressed i...

CVE-2018-3183

CVE-2018-3183 affects OpenJDK/OpenJDK-based runtimes (Java SE/Java SE Embedded/JRockit) specifically the Scripting engine. Public records in connected advisories show affected OpenJDK versions including Java 8u182 and 11 (and 8u181 for embedded/JRockit R28.3.19). The underlying issue is a scripti...

CVE-2018-3204

CVE-2018-3204 affects Oracle Fusion Middleware’s Oracle BI Enterprise Edition Analytics Server (subcomponent) in the 12.2.1.3.0 release. An unauthenticated attacker with network access over HTTP can compromise data; user interaction is required. CVSS v3.0 base score is 8.2 (High). The vulnerabili...