CVE-2018-14653

A buffer overflow on the heap was found in gfgetspecreq RPC request. A remote, authenticated attacker could use this flaw to cause denial of service and read arbitrary files on glusterfs server node...

PT-2020-8672

Name of the Vulnerable Software and Affected Versions: bitcoind and Bitcoin-Qt versions prior to 0.17.1 Description: The issue allows injection of arbitrary data into the debug log via an RPC call. Recommendations: For versions prior to 0.17.1, update to version 0.17.1 or later to resolve the iss...

SILENTTRINITY - A Post-Exploitation Agent Powered By Python, IronPython, C#/.NET

A post-exploitation agent powered by Python, IronPython, C/.NET. Requirements Server requires Python = 3.7 SILENTTRINITY C implant requires .NET = 4.5 How it works Notes .NET runtime support The implant needs .NET 4.5 or greater due to the IronPython DLLs being compiled against .NET 4.0, also the...

Oracle Solaris Critical Patch Update : oct2018_SRU11_4_1_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated...

CVE-2018-3172

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris. Successful attacks of thi...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris. Successful attacks of thi...

CVE-2018-3172

CVE-2018-3172 affects Oracle Solaris (Sun Systems Products Suite) RPC component. Affected: Solaris 10 and 11.4. Vulnerability: unauthenticated attacker can trigger via Portmap v3 to compromise Solaris, potentially causing partial denial of service. Root cause and detailed impact are described in ...

CVE-2018-3172: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris. Successful attacks of thi...

PT-2018-2417

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 and 11.4 Description The issue is related to inadequate access control in the RPC component of Oracle Solaris, which can be exploited by a remote attacker to cause a partial denial of service using the Portmap v3...

Pentest-Machine - Automates Some Pentest Jobs Via Nmap Xml File

Automates some pentesting work via an nmap XML file. As soon as each command finishes it writes its output to the terminal and the files in output-by-service/ and output-by-host/. Runs fast-returning commands first. Please send me protocols/commands/options that you would like to see included. HT...

Wikidforum 2.20 - Cross-Site Scripting

Wikidforum 2.20 - Cross-Site Scripting Exploit Title: Wikidforum 2.20 - Cross-Site Scripting Date: 2018-10-10 Exploit Author: Amir Hossein Mahboubi Vendor Homepage: https://sourceforge.net/projects/wikidforum/ Software Link:...

Solaris 10 (sparc) : 152264-02

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris. Successful attacks of thi...

Solaris 10 (x86) : 152265-02

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris. Successful attacks of thi...

Wikidforum 2.20 SQL Injection

Exploit Title: Wikidforum 2.20 - 'messageid' SQL Injection Exploit Author: Ihsan Sencan Exploit Author: Ihsan Sencan Date: 2018-10-09 Vendor Homepage: https://sourceforge.net/projects/wikidforum/ Software Link: https://sourceforge.net/projects/wikidforum/files/Wikidforum-com-ed.2.20.zip/download...

Microsoft Windows - Net-NTLMv2 Reflection DCOM/RPC (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/windows/reflectivedllinjection' class MetasploitModule 'Windows Net-NTLMv2 Reflection DCOM/RPC', 'Description' = %q Module utilizes the Net-NTLMv2...

rpc-promens.com XSS vulnerability

Open Bug Bounty ID: OBB-683572 Description| Value ---|--- Affected Website:| rpc-promens.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Windows Net-NTLMv2 Reflection DCOM/RPC Exploit

This Metasploit module utilizes the Net-NTLMv2 reflection between DCOM/RPC to achieve a SYSTEM handle for elevation of privilege. Currently the module does not spawn as SYSTEM, however once achieving a shell, one can easily use incognito to impersonate the token. This module requires Metasploit:...

Windows Net-NTLMv2 Reflection DCOM/RPC

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/windows/reflectivedllinjection' class MetasploitModule 'Windows Net-NTLMv2 Reflection DCOM/RPC', 'Description' = %q Module utilizes the Net-NTLMv2...

WS-2018-0633

CockroachDB versions v1.2-alpha.20171113 to v2.0.5 and v2.1.0-alpha.00000000 to v2.1.0-beta.20180924 are vulnerable to Authentication Bypass. All RPCs other than roachpb.Batch RPC were open to the public, even when the server was running in secure mode...

Monero: DoS for remote nodes using Slow Loris attack

Summary: Using the slow loris attack it's possible to make the the daemon unresponsive to all RPC requests without at least a restart. Description: I used this node.js application https://www.npmjs.com/package/sloww to perform the attack on one of my remote nodes, but any other implementation of...