PT-2019-1619

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue allows a remote attacker to execute arbitrary code and gain a root shell through a Command Injection vulnerability. This occurs when the twsystem function is called with untrusted input from...

PT-2019-1621

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description An issue allows a remote attacker to execute arbitrary code and get a root shell through a Command Injection vulnerability. This occurs when any HNAP API function triggers a call to the system function...

PT-2019-1620

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs due to insufficient input validation in the SetWebFilterSettings API...

PT-2019-1623

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection vulnerability in the SetStaticRouteIPv4Settings API function, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs when th...

PT-2019-1616

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.12A1 Description The issue is related to a Command Injection, allowing a remote attacker to execute arbitrary code and gain a root shell. This occurs when the twsystem function is called with untrusted input from the...

systemd-journald Memory Corruption / Information Leak Vulnerability

This is a thorough analysis of how Qualys approached exploiting three vulnerabilities in systemd-journald. Although they have not released formal exploits yet, they detail in here is useful in understanding the flaws. Qualys Security Advisory System Down: A systemd-journald exploit...

Deepin Linux 15 - 'lastore-daemon' Local Privilege Escalation

!/bin/bash Deepin Linux 15.5 lastore-daemon D-Bus Local Root Exploit The lastore-daemon D-Bus configuration on Deepin Linux 15.5 permits any user in the sudo group to install arbitrary packages without providing a password, resulting in code execution as root. By default, the first user created o...

Privilege escalation

The Leagoo P1 Android device with a build fingerprint of sp7731c1h1032v4bird:6.0/MRA58K/android.20170629.214736:user/release-keys contains a hidden root privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical acce...

CVE-2018-18556: Undefined Security Weakness

A privilege escalation issue was discovered in VyOS 1.1.8. The default configuration also allows operator users to execute the pppd binary with elevated sudo permissions. Certain input parameters are not properly validated. A malicious operator user can run the binary with elevated permissions an...

Command Execution Vulnerability in China Telecom's Smart Gateway Management Platform

China Telecom Group Corporation is a large state-owned communications enterprise in China, a global partner of Shanghai World Expo, and one of the "World's Top 500 Enterprises" for many years in a row. It mainly operates integrated information services such as fixed-line telephony, mobile...

xorg-x11-server 1.20.1 - Local Privilege Escalation

xorg-x11-server 1.20.1 - Local Privilege Escalation Exploit Title: xorg-x11-server bolo console opened Building root shell wait 2 minutes crontab overwritten ... cut Xorg output ... Xorg killed II Server terminated successfully 0. Closing log file. Don't forget to cleanup /etc/crontab and /tmp di...

xorg-x11-server < 1.20.1 - Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits Exploit Title: xorg-x11-server bolo console opened Building root shell wait 2 minutes crontab overwritten ... cut Xorg output ... Xorg killed II Server terminated successfully 0. Closing log file. Don't forget to cleanup /etc/crontab and /tmp...

xorg-x11-server < 1.20.1 - Local Privilege Escalation

Exploit Title: xorg-x11-server bolo console opened Building root shell wait 2 minutes crontab overwritten ... cut Xorg output ... Xorg killed II Server terminated successfully 0. Closing log file. Don't forget to cleanup /etc/crontab and /tmp dir sh-4.2 id && whoami uid=0root gid=0root...

Cradlepoint Router Password Disclosure

Many vulnerabilities in the built-in software of the Cradlepoint Router. 100000 such routers can be seen in the shodan https://www.shodan.io/search?query=cradlepointhttpservice. These vulnerabilities were reported to Cradlepoint in august. A hardcoded password allows you to retrieve sensitive...

Solaris - RSH Stack Clash Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Solaris RSH Stack Clash Privilege Escalation', 'Description' = %q This module exploits a vulnerability in RSH on unpatched Solaris systems which...

Solaris RSH Stack Clash Privilege Escalation Exploit

This Metasploit module exploits a vulnerability in RSH on unpatched Solaris systems which allows users to gain root privileges. The stack guard page on unpatched Solaris systems is of insufficient size to prevent collisions between the stack and heap memory, aka Stack Clash. This Metasploit modul...

CVE-2018-15371

A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient...

Authentication flaw

A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient...

CVE-2018-15368 Cisco IOS XE Software Privileged EXEC Mode Root Shell Access Vulnerability

A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerability is due to the affected software improperl...

CVE-2018-15371 Cisco IOS XE Software Shell Access Authentication Bypass Vulnerability

A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient...