Microsoft Office 2013 Service Pack 1 Security Feature Bypass And RCE Vulnerabilities (KB4486725)

This host is missing an important security update according to Microsoft KB4486725 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2013 Service Pack 1 Security Feature Bypass And RCE Vulnerabilities (KB4486734)

This host is missing an important security update according to Microsoft KB4486734 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Excel 2016 Security Feature Bypass And RCE Vulnerabilities (KB4486718)

This host is missing an important security update according to Microsoft KB4486718 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

November 2020 Patch Tuesday – 112 Vulnerabilities, 17 Critical, Windows Codecs, Network File System, Workstation, Adobe

This month’s Microsoft Patch Tuesday addresses 112 vulnerabilities with 17 of them labeled as Critical. The 17 Critical vulnerabilities cover Windows Codecs, Network File System, Sharepoint, Windows Print Spooler, and several other workstation vulnerabilities. Adobe released patches today for Ado...

CVE-2020-24384

A10 Networks ACOS and aGalaxy management Graphical User Interfaces GUIs have an unauthenticated Remote Code Execution RCE vulnerability that could be used to compromise affected ACOS systems. ACOS versions 3.2.x including and after 3.2.2, 4.x, and 5.1.x are affected. aGalaxy versions 3.0.x, 3.2.x...

CVE-2020-24384

The CVE-2020-24384 issue affects A10 Networks ACOS and aGalaxy GUI with an unauthenticated Remote Code Execution (RCE) vulnerability that could compromise affected systems. Affected software: ACOS (versions 3.2.x including 3.2.2+, 4.x, 5.1.x) and aGalaxy (versions 3.0.x, 3.2.x, 5.0.x). The vulner...

Check Point Response to CVE-2020-28041 - NAT Slipstreaming

Cause The attack involves several vectors - Local IP disclosure, max MTU UDP and TCP calculation and leveraging a SIP parser weakness in fragmented HTTP packets which enables to "Slipstream" a legitimate SIP connection in an HTTP POST request generated by the victim's browser. The full descriptio...

Exploit for OS Command Injection in Webmin

CVE-2019-15107 Python implementation of CVE-2019-15107 Webm...

git-lfs Remote Code Execution Exploit

Proof of concept git-lfs remote code execution exploit written in Go. Affects Git, GitHub CLI, GitHub Desktop, Visual Studio, GitKraken, SmartGit, SourceTree, and more. / Go PoC exploit for git-lfs - Remote Code Execution RCE vulnerability CVE-2020-27955 git-lfs-RCE-exploit-CVE-2020-27955.go...

CVE-2020-28328

SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can refer to an attacker-controlled PHP file under the web root. This is a high-severity issue (CVE-2020-28328)...

git-lfs Remote Code Execution

/ Go PoC exploit for git-lfs - Remote Code Execution RCE vulnerability CVE-2020-27955 git-lfs-RCE-exploit-CVE-2020-27955.go Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Affected RCE exploit: Git / GitHub CLI / GitHub Desktop / Visual Studio / GitKraken / SmartGit /...

Microsoft Windows Codecs Library RCE (October 2020)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability : - A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who...

Oracle WebLogic Server RCE (CVE-2020-14882)

Binary data oracleweblogicserverCVE-2020-14882.nbin...

Starbucks: Unrestricted File Upload Leads to RCE on mobile.starbucks.com.sg

ko2sec discovered an .ashx endpoint on mobile.starbucks.com.sg intended for image files permitted unrestricted file type uploads which could lead to a potential RCE. ko2sec's thorough analysis provided additional endpoints on other out of scope domains that shared this vulnerability. @ko2sec —...

CVE-2020-12146

CVE-2020-12146 concerns Silver Peak Unity Orchestrator path traversal via the /debugFiles REST API. An authenticated user can access, modify, and delete restricted files on the Orchestrator server. Affected versions are pre-8.9.11+, 8.10.11+, and 9.0.1+. ThreatPost notes that patches exist, and S...

CVE-2020-27955

Git LFS on Windows is vulnerable to remote code execution when cloning a malicious repo, due to Go behavior that may execute a current-directory binary (git.bat/git.exe). The issue is a known incomplete fix for CVE-2020-27955 and is discussed across advisories (GHSA-CX3W-XQMC-84G5; GHSA-4G4P-42WC...

WordPress Augmented Reality plugin <= 1.2.0 - Unauthenticated PHP File Upload leading to Remote Code Execution (RCE) vulnerability

Unauthenticated PHP File Upload leading to Remote Code Execution RCE vulnerability found by Robert Wiggins in WordPress Augmented Reality plugin versions = 1.2.0. Solution Note from wordpress.org plugin repository: This plugin has been closed as of September 3, 2020 and is not available for...

Augmented Reality <= 1.2.0 - Unauthenticated PHP File Upload leading to RCE

The elFinder connector used allows upload of PHP files as the 'uploadAllow' options contains 'text/x-php'. This allows an unauthenticated user to upload PHP files, leading to a RCE vulnerability. The issue is similar to https://wpscan.com/vulnerability/10389 POST...

TP-Link WDR4300 - Remote Code Execution (Authenticated) Exploit

Exploit Title: TP-Link WDR4300 - Remote Code Execution Authenticated Date: 2020-08-28 Exploit Author: Patrik Lantz Vendor Homepage: https://www.tp-link.com/se/home-networking/wifi-router/tl-wdr4300/ Version: TL-WDR4300, N750 Wireless Dual Band Gigabit Router Tested on: Firmware version 3.13.33 an...

Augmented Reality <= 1.2.0 - Unauthenticated PHP File Upload leading to RCE

The elFinder connector used allows upload of PHP files as the 'uploadAllow' options contains 'text/x-php'. This allows an unauthenticated user to upload PHP files, leading to a RCE vulnerability. The issue is similar to https://wpscan.com/vulnerability/10389 PoC POST...