September 12, 2023-KB5030178 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

September 12, 2023-Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.6.2 for Windows Server 2008 SP2 (KB5030185)

September 12, 2023-Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.6.2 for Windows Server 2008 SP2 KB5030185 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.6.2 REMINDER Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 have...

LG Simple Editor Remote Code Execution Exploit

This Metasploit module exploits broken access control and directory traversal vulnerabilities in LG Simple Editor software for gaining code execution. The vulnerabilities exist in versions of LG Simple Editor prior to v3.21. By exploiting this flaw, an attacker can upload and execute a malicious...

SolarView Compact 6.00 Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SolarView Compact unauthenticated remote command execution vulnerability.', 'Description' = %q CONTEC's SolarView™ Series enables you to monitor...

SolarView Compact 6.00 Remote Command Execution Exploit

This Metasploit module exploits a command injection vulnerability on the SolarView Compact version 6.00 web application via the vulnerable endpoint downloader.php. After exploitation, an attacker will have full access with the same user privileges under which the webserver is running typically as...

Apache NiFi H2 Connection String Remote Code Execution Exploit

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution. This exploit will result in several shells 5-7. Successfully test...

The Current Security State of Private 5G Networks

Private 5G networks offer businesses enhanced security, reliability, and scalability. Learn more about why private 5G could be the future of secure networking...

Maltrail 0.53 Unauthenticated Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Maltrail Unauthenticated Command Injection', 'Description' = %q Maltrail is a malicious traffic detection system, utilizing publicly available...

RaspAP 2.8.7 Unauthenticated Command Injection Exploit

RaspAP is feature-rich wireless router software that just works on many popular Debian-based devices, including the Raspberry Pi. A Command Injection vulnerability in RaspAP versions 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands in the context of the user running...

The vulnerability of the RACEng mechanism for calculating reliability metrics in Windows Server operating systems allows attackers to enhance their privileges.

The vulnerability of the Reliability Analysis Metrics Calculation Mechanism RACEng for Windows Server operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2023-36876

Reliability Analysis Metrics Calculation RacTask Elevation of Privilege Vulnerability...

CVE-2023-36876

Reliability Analysis Metrics Calculation RacTask Elevation of Privilege Vulnerability...

CVE-2023-36876

Reliability Analysis Metrics Calculation RacTask Elevation of Privilege Vulnerability...

CVE-2023-35379

Reliability Analysis Metrics Calculation Engine RACEng Elevation of Privilege Vulnerability...

CVE-2023-35379

Reliability Analysis Metrics Calculation Engine RACEng Elevation of Privilege Vulnerability...

CVE-2023-35379

Reliability Analysis Metrics Calculation Engine RACEng Elevation of Privilege Vulnerability...

Privilege escalation

Reliability Analysis Metrics Calculation Engine RACEng Elevation of Privilege Vulnerability...

Privilege escalation

Reliability Analysis Metrics Calculation RacTask Elevation of Privilege Vulnerability...

CVE-2023-35379 Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability

...

CVE-2023-35379

CVE-2023-35379 is a local privilege escalation affecting the Reliability Analysis Metrics Calculation Engine (RACEng) in Windows Server 2008 R2 SP1 (and related Server Core variants). The root cause is an elevation of privilege in RACEng, leading to total impact and a CVSS 3.1 score of 7.8 (High)...