2376 matches found
Windows Service Trusted Path Privilege Escalation
This module exploits a logic flaw due to how the lpApplicationName parameter is handled. When the lpApplicationName contains a space, the file name is ambiguous. Take this file path as example: C:\program files\hello.exe; The Windows API will try to interpret this as two possible paths:...
Viscosity - OpenVPN Client OS X Local Root Exploit
Exploit for macOS platform in category local exploits !/bin/sh Viscatory zx2c4 After the hullabaloo from the Tunnelblick local root, savy Mac users began defending Viscosity, another OS X VPN client. They figured, since they spent money on Viscosity, surely it would be better designed than the fr...
Tunnel Blick Race Condition Local Root
/ ==== Pwnnel Blicker ==== = = = zx2c4 = = = ======================== Tunnel Blick, a widely used OpenVPN manager for OSX comes with a nice SUID executable that has more holes than you care to count. It's a treasure chest of local roots. I picked one that looked interesting, and here we have Pwnn...
Tunnel Blick Local Root Exploit Version 2
!/bin/sh Pwnnel Blicker for kids zx2c4 This is another exploit for Tunnel Blick. Other exploits for Tunnel Blick are available here: http://git.zx2c4.com/Pwnnel-Blicker/tree/ echo "+ Making vulnerable directory." mkdir -pv /tmp/pwn/openvpn/openvpn-0 echo "+ Preparing payload." cat...
Tunnelblick - Local Privilege Escalation (1)
Tunnelblick - Local Privilege Escalation 1 / ==== Pwnnel Blicker ==== = = = zx2c4 = = = ======================== Tunnel Blick, a widely used OpenVPN manager for OSX comes with a nice SUID executable that has more holes than you care to count. It's a treasure chest of local roots. I picked one tha...
Tunnelblick - Local Privilege Escalation (1)
/ ==== Pwnnel Blicker ==== = = = zx2c4 = = = ======================== Tunnel Blick, a widely used OpenVPN manager for OSX comes with a nice SUID executable that has more holes than you care to count. It's a treasure chest of local roots. I picked one that looked interesting, and here we have Pwnn...
OpenVPN Defaced by Hackers
OpenVPN Defaced by Hackers OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features Got Hacked Yesterday by Hacker called "HcJ". Hacked deface the page as shown in above picture. Words form Page: OPENVPN Hacked No Ne...
Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities
Document Title: =============== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=436 Release Date: ============= 2012-02-17 Vulnerability Laboratory ID VL-ID: ==================================== 436...
Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities
Document Title: =============== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=436 Release Date: ============= 2012-02-17 Vulnerability Laboratory ID VL-ID: ==================================== 436...
Stable Channel Update for Chromebooks
The Google Chrome team is happy to announce the release of Chrome 17 on the Stable Channel for Chromebooks Acer AC700, Samsung Series 5, and Cr-48. You can read more about the Chrome version 17.0.963.54 Platform version: 1412.186.0 Release highlights: Read about improvements to Chrome over on the...
Famous VPN service Proxpn compromised
Famous VPN service Proxpn compromised proXPN is one of the famous VPN client based on OpenVPN Service, today hacked by hacked named "TurkisH-RuleZ". The Server is seems to be Compromised in this Hacking case. Compromised url is h and Mirror of Hack is available here...
OpenVPN Server Detection
The remote host is running an OpenVPN server. Based on its responses, the remote host appears to be in TLS or preshared key mode. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56022; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate",...
Samsung hires Android hacker Cyanogen
Samsung hires Android hacker Cyanogen Steve 'Cyanogen' Kondik is best known as the creator of the CyanogenMod for Android, an after market customised firmware bringing new features and functionality to the Android platform. There's no information yet on whether Samsung is interested in CyanogenMo...
Mandriva Update for openvpn MDVA-2010:025 (openvpn)
Check for the Version of openvpn OpenVAS Vulnerability Test Mandriva Update for openvpn MDVA-2010:025 openvpn Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Mandriva Update for openvpn MDVA-2010:025 (openvpn)
Check for the Version of openvpn OpenVAS Vulnerability Test Mandriva Update for openvpn MDVA-2010:025 openvpn Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
MDVA-2008:002 : drakx-net
The VPN connection wizard failed to setup OpenVPN connections with username and password, because of a missing requirement in the package. This update package adds the perl-Net-Telnet dependency to solve the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated...
MDVA-2008:178 : openvpn
The OpenVPN package that shipped with Mandriva Linux 2009.0 does not come with pkcs11 support, which meant that pkcs11 could not be used together with OpenVPN. This updated package fixes this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not...
Mandriva Update for openvpn MDVA-2008:178 (openvpn)
Check for the Version of openvpn OpenVAS Vulnerability Test Mandriva Update for openvpn MDVA-2008:178 openvpn Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Mandriva Update for openvpn MDVA-2008:178 (openvpn)
Check for the Version of openvpn OpenVAS Vulnerability Test Mandriva Update for openvpn MDVA-2008:178 openvpn Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Mandriva Update for drakx-net MDVA-2008:002 (drakx-net)
Check for the Version of drakx-net OpenVAS Vulnerability Test Mandriva Update for drakx-net MDVA-2008:002 drakx-net Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...