1078 matches found
Microsoft Windows SMB Client Driver CVE-2019-1293 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
WebExec Authenticated User Code Execution
This module uses a valid username and password of any level or password hash to execute an arbitrary payload. This module is similar to the "psexec" module, except allows any non-guest account by default. Module Options msf use exploit/windows/smb/webexec msf undefinedwebexec show actions...
Microsoft Windows SMB Client Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
Security Bulletin: Samba as used in IBM QRadar SIEM is vulnerable to multiple CVE's. (CVE-2016-2110, CVE-2016-2112, CVE-2016-2115)
Summary Samba is susceptible to multiple vulnerabilities as used in IBM QRadar SIEM. Vulnerability Details CVE-ID: CVE-2016-2110 Description: Samba could allow a remote attacker to bypass security restrictions, caused by the failure to protect the feature negotiation of NTLMSSP from a downgrade. ...
Microsoft Windows: Enable insecure guest logons
This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininsecureguestlogons.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Enable insecure guest logons Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...
Microsoft Windows 8.1/2012 R2 - SMB Denial of Service Exploit
Exploit for windows platform in category dos / poc Exploit Title: Microsoft Windows SMB Client Null Pointer Dereference Denial of Service Exploit Author: Nabeel Ahmed Version: SMBv3 Tested on: Windows 8.1 x86, Windows Server 2012 R2 x64 CVE : CVE-2018-0833 import SocketServer from binascii import...
Microsoft Windows 8.1/2012 R2 - SMBv3 Null Pointer Dereference Denial of Service
Exploit Title: Microsoft Windows SMB Client Null Pointer Dereference Denial of Service Date: 26/02/2018 Exploit Author: Nabeel Ahmed Version: SMBv3 Tested on: Windows 8.1 x86, Windows Server 2012 R2 x64 CVE : CVE-2018-0833 import SocketServer from binascii import unhexlify payload =...
Microsoft Windows SMB Client Improper Initialization Denial of Service Vulnerability
This vulnerability allows remote attackers to deny service to vulnerable installations of Microsoft Windows. In some cases, user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file, but attack vectors may vary depending on...
Microsoft Windows SMB Server (v1v2) - Mount Point Arbitrary Device Open Privilege Escalation
Microsoft Windows SMB Server v1v2 - Mount Point Arbitrary Device Open Privilege Escalation Windows: SMB Server v1 and v2 Mount Point Arbitrary Device Open EoP Platform: Windows 10 1703 and 1709 seems the same on 7 and 8.1 but not extensively tested Class: Elevation of Privilege Summary: The SMB...
VirtualBox: Windows Process DLL UNC Path Signature Bypass EoP(CVE-2017-10129)
VirtualBox: Windows Process DLL UNC Path Signature Bypass EoP Platform: VirtualBox v5.1.22 r115126 x64 Tested on Windows 10 Class: Elevation of Privilege Summary: The process hardening implemented by the VirtualBox driver can be circumvented to load arbitrary code inside a VirtualBox process givi...
VirtualBox 5.1.22 - Windows Process DLL UNC Path Signature Bypass Privilege Escalation Exploit
Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1296 VirtualBox: Windows Process DLL UNC Path Signature Bypass EoP Platform: VirtualBox v5.1.22 r115126 x64 Tested on Windows 10 Class: Elevation of Privilege Summary: The...
VirtualBox 5.1.22 - Windows Process DLL UNC Path Signature Bypass Privilege Escalation
VirtualBox 5.1.22 - Windows Process DLL UNC Path Signature Bypass Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1296 VirtualBox: Windows Process DLL UNC Path Signature Bypass EoP Platform: VirtualBox v5.1.22 r115126 x64 Tested on Windows 10 Class: Elevatio...
samba security and bug fix update
3.6.23-41.0.1 - Remove use-after-free talloctos inlined function problem John Haxby orabug 18253258 3.6.23-41 - resolves: 1413672 - Auth regression after secret changed 3.6.23-40 - resolves: 1405356 - CVE-2016-2125 CVE-2016-2126 3.6.23-39 - resolves: 1297805 - Fix issues with printer unpublishing...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the smbclient package of the Debian GNU/Linux operating system may be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who have completed th...
SMB Client plugin for FE - Exported ContentProvider, Runtime privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application SMB Client plugin for FE published at the 'play' market has multiple vulnerabilities...
Samba smbd Daemon Symlink Verification Information Disclosure (CVE-2015-5252)
An information disclosure vulnerability has been reported in Samba. The vulnerability is due to flaws in the symbolic link verification mechanism. A remote, authenticated attacker could exploit this vulnerability by using an SMB client to request for files or directories outside the share path...
The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory.
The vulnerability of the SMBClient component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder, operating locally, to gain access to protected information in the kernel memory...
Apple OS X SMBClient Memory Disclosure Vulnerability
Apple OS X is an operating system developed by Apple Inc. Apple OS X SMBClient has a problem that allows local users to exploit a vulnerability to access the contents of kernel memory...
Apple OS X SMB Client Buffer Overflow Vulnerability
Apple OS X is a proprietary operating system developed by Apple for Mac computers, and SMB client is a client program component that provides access to SMB/CIFS servers. A security vulnerability exists in the SMB client in Apple OS X versions prior to 10.10.5. A remote attacker could exploit this...
