2129 matches found
OpenSMTPD Out-Of-Bounds Read / Local Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenSMTPD OOB Read Local Privilege Escalation', 'Description' = %q This module exploits an out-of-bounds read of an attacker-controlled string in...
Privilege escalation
An exploitable privilege escalation vulnerability exists in the iwconsole functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send command...
CVE-2019-5136
An exploitable privilege escalation vulnerability exists in the iwconsole functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send command...
Moxa AWK-3131A iw_console Privilege Escalation Vulnerability
Summary An exploitable privilege escalation vulnerability exists in the iwconsole functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send...
CVE-2020-1690
An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from privilege escalation. A non-root attacker in one or more Red Hat OpenStack RHOSP containers could send messages to the dbus. With access to the dbus, t...
OpenSMTPD - MAIL FROM Remote Code Execution Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenSMTPD MAIL FROM Remote Code Execution', 'Description' = %q This module exploits a command injection in the MAIL FROM field during SMTP...
OpenSMTPD - MAIL FROM Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenSMTPD MAIL FROM Remote Code Execution', 'Description' = %q This module exploits a command injection in the MAIL FROM field during SMTP...
OpenSMTPD MAIL FROM Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenSMTPD MAIL FROM Remote Code Execution', 'Description' = %q This module exploits a command injection in the MAIL FROM field during SMTP...
[ASA-202002-2] sudo: privilege escalation
Arch Linux Security Advisory ASA-202002-2 ========================================= Severity: High Date : 2020-02-06 CVE-ID : CVE-2019-18634 Package : sudo Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1093 Summary ======= The package sudo before version 1.8.31...
Linux: Home directory for root user
The password file stores information about users such like username, UID, GID, etc. This script tests, if home directories for users are located in /home. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/...
Linux: Strict permissions for directories owned by root
This script searches for directories owned by root user with another group or access permissions stricter then 755. Note: This script dramatically increases the scan duration. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OpenSMTPD MAIL FROM Remote Code Execution
This module exploits a command injection in the MAIL FROM field during SMTP interaction with OpenSMTPD to execute a command as the root user. Module Options msf use exploit/unix/smtp/opensmtpd/mailfromrce msf undefinedmailfromrce show actions ...actions... msf undefinedmailfromrce set ACTION msf...
Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2019-1656)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-18932
log.c in Squid Analysis Report Generator sarg through 2.3.11 allows local privilege escalation. By default, it uses a fixed temporary directory /tmp/sarg. As the root user, sarg creates this directory or reuses an existing one in an insecure manner. An attacker can pre-create the directory, and...
HPE Intelligent Management Center PLAT Stack Buffer Overflow (CVE-2018-7074)
A stack buffer overflow vulnerability has been reported in HPE Intelligent Management Center PLAT. The vulnerability is due to an overly large block size parameter provided in the TFTP packet data. Successful exploitation could results in arbitrary code execution under the context of the SYSTEM. ...
CVE-2012-0945
whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...
CVE-2012-0945
whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...
Design/Logic Flaw
whoopsie-daisy before 0.1.26: Root user can remove arbitrary files...
CVE-2012-0945
CVE-2012-0945 affects whoopsie-daisy prior to 0.1.26. The reported vulnerability allows the root user to remove arbitrary files, describing a root‑level impact due to the underlying cause in whoopsie-daisy. The entry is corroborated across multiple sources in this set (e.g., Red Hat/TLP and NVD r...
