PT-2018-2048

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is related to access control errors in Microsoft SharePoint Enterprise Server. An attacker could exploit this by sending a specially crafted request t...

PT-2018-2052

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is related to insufficient access control in Microsoft SharePoint Server, allowing a remote attacker to elevate their privileges using a specially...

KB4462922: Windows 10 October 2018 Security Update

The remote Windows host is missing security update 4462922. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker...

HP Printers CSRF Vulnerability (Oct 2018)

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129000052 and other firmware versions. This vulnerability is known as cross-site request forgery CSRF, and could potentially be exploited remotely to allow elevation of privilege. Copyright C 2018...

Microsoft Windows - Net-NTLMv2 Reflection DCOM/RPC (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/windows/reflectivedllinjection' class MetasploitModule 'Windows Net-NTLMv2 Reflection DCOM/RPC', 'Description' = %q Module utilizes the Net-NTLMv2...

Windows Net-NTLMv2 Reflection DCOM/RPC

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/windows/reflectivedllinjection' class MetasploitModule 'Windows Net-NTLMv2 Reflection DCOM/RPC', 'Description' = %q Module utilizes the Net-NTLMv2...

CVE-2018-0437: Improper Privilege Management

A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...

Sql injection

An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xpcmdshell for the further privilege elevation...

PT-2018-13678

Name of the Vulnerable Software and Affected Versions Rausoft ID.prove version 2.95 Description An issue was discovered that allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter on the login page. This could potentially be used for privilege elevation, for...

CVE-2018-16659: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xpcmdshell for the further privilege elevation...

CVE-2018-16659

An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xpcmdshell for the further privilege elevation...

Sql injection

A potential security vulnerability has been identified in HPE Device Entitlement Gateway DEG v3.2.4, v3.3 and v3.3.1. The vulnerability could be remotely exploited to allow local SQL injection and elevation of privilege...

Rausoft ID.prove 2.95 - Username SQL injection Vulnerability

Exploit for windows platform in category web applications Exploit Title: Rausoft ID.prove 2.95 - 'Username' SQL injection Google Dork: inurl:IdproveWebclient Exploit Author: Ilya Timchenko, Mercedes pay S.A. Vendor Homepage: https://www.idprove.de Software Link:...

Rausoft ID.prove 2.95 - Username SQL injection

Rausoft ID.prove 2.95 - Username SQL injection Exploit Title: Rausoft ID.prove 2.95 - 'Username' SQL injection Google Dork: inurl:IdproveWebclient Date: 2018-09-26 Exploit Author: Ilya Timchenko, Mercedes pay S.A. Vendor Homepage: https://www.idprove.de Software Link:...

PT-2018-17910

Name of the Vulnerable Software and Affected Versions HPE Device Entitlement Gateway versions 3.2.4 through 3.3.1 Description A potential security issue has been identified that could be remotely exploited, allowing local SQL injection and elevation of privilege. Recommendations For versions 3.2....

Microsoft Windows ALPC Task Scheduler Local Privilege Elevation Exploit

On vulnerable versions of Windows the alpc endpoint method SchRpcSetSecurity implemented by the task scheduler service can be used to write arbitrary DACLs to .job files located in c:\windows\tasks because the scheduler does not use impersonation when checking this location. Since users can creat...

CVE-2018-9282

An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to podcastReceiverAdmin.view; no administrator access is required. By injecting a JavaScript payload, this flaw could be used to manipulate a...

PT-2018-18958

Name of the Vulnerable Software and Affected Versions Subsonic Media Server version 6.1.1 Description A stored XSS issue was found in the podcast subscription form of the Subsonic Media Server. The add parameter to the podcastReceiverAdmin.view is vulnerable, allowing an attacker to inject a...

CVE-2018-9282: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the add parameter to podcastReceiverAdmin.view; no administrator access is required. By injecting a JavaScript payload, this flaw could be used to manipulate a...

PT-2018-3330

Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description: The issue is related to errors in privilege management within the IBM DB2 database management system. Exploitation of this issue...