Kardex Mlog MCC 5.7.12 Remote Code Execution

!/usr/bin/env python3 Exploit Title: Kardex Mlog MCC 5.7.12 - RCE Remote Code Execution Date: 12/13/2022 Exploit Author: Patrick Hener Vendor Homepage: https://www.kardex.com/en/mlog-control-center Version: 5.7.12+0-a203c2a213-master Tested on: Windows Server 2016 CVE : CVE-2023-22855 Writeup:...

Kardex Mlog MCC 5.7.12 - Remote Code Execution Exploit

!/usr/bin/env python3 Exploit Title: Kardex Mlog MCC 5.7.12 - RCE Remote Code Execution Date: 12/13/2022 Exploit Author: Patrick Hener Vendor Homepage: https://www.kardex.com/en/mlog-control-center Version: 5.7.12+0-a203c2a213-master Tested on: Windows Server 2016 CVE : CVE-2023-22855 Writeup:...

Remote code execution

Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious...

Exploit for Improper Input Validation in Microsoft

CVE-2023-23397 Outlook Privilege Escalation Proof of Concept...

Vulnerabilities fixed in Zoom

Zoom has fixed vulnerabilities in the Zoom client for various platforms. An unauthenticated remote malicious person could exploit the exploit the vulnerabilities to cause a denial-of-service. A local malicious person can grant themselves elevated privileges through vulnerabilities in the installe...

Xerox WorkCentre 3550 <= 25.003.03.000 Information Disclosure Vulnerability

Xerox WorkCentre 3550 is prone to an information disclosure vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

PT-2023-14791 · Xerox · Xerox Workcentre 3550

Name of the Vulnerable Software and Affected Versions: Xerox WorkCentre 3550 version 25.003.03.000 Description: An authenticated attacker can view the SMB server settings and obtain the stored cleartext credentials associated with those settings. Recommendations: For Xerox WorkCentre 3550 version...

CVE-2022-45897

On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtain the stored cleartext credentials associated with those settings...

CVE-2019-9579

An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g., an attacker with WRITEXATTR can change permissions. This occurs because of a combination of three factors: ZFS extended attributes are...

Design/Logic Flaw

An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g., an attacker with WRITEXATTR can change permissions. This occurs because of a combination of three factors: ZFS extended attributes are...

Exploit for CVE-2022-26809

Cve-2022-26809 CVE-2022-26809 This repo just simply resear...

CVE-2019-9579

An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g., an attacker with WRITEXATTR can change permissions. This occurs because of a combination of three factors: ZFS extended attributes are...

CVE-2019-9579

CVE-2019-9579 affects Illumos-based NexentaStor (4.0.5, 5.1.2) and related products. The SMB server allows unintended access via a combination of ZFS extended attributes used for NT named streams, SMB open-handle semantics, and the server passing certain attribute requests to the underlying objec...

CVE-2019-9579

An issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products. The SMB server allows an attacker to have unintended access, e.g., an attacker with WRITEXATTR can change permissions. This occurs because of a combination of three factors: ZFS extended attributes are...

noPac - Exploiting CVE-2021-42278 And CVE-2021-42287 To Impersonate DA From Standard Domain User

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user Changed from sam-the-admin. Usage SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments: domain/username:password Account used to authenticate to DC. optional arguments: -h, --help show thi...

Exploit for CVE-2021-34527

PrintNightmare CVE-2021-34527 This version of the PrintNigh...

CVE-2022-35804

SMB Client and Server Remote Code Execution Vulnerability...

CVE-2022-35804 SMB Client and Server Remote Code Execution Vulnerability

...

KLA12602 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of...

Oracle Solaris Critical Patch Update : jul2022_SRU11_4_47_119_2

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Oracle Solaris product of Oracle Systems component: SMB Server. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon ...