MAL-004

MAL-004: Command-Injection-Bypass für CVE-2020-12641 in Roundcube Webmail Es wurde ein Bypass für „CVE-2020-12641: Command Injection via „imconvertpath“ in Roundcube Webmail“ gefunden, der Versionen vor 1.4.5 und 1.3.12 betrifft. Die PHP-Funktion „escapeshellcmd“, die zur Verhinderung von...

CVE-2023-23397

CVE-2023-23397 Elevazione dei privilegi in Outlook Prova di concetto per CVE-2023-23397 in Python Un "proof of concept" semplice e rapido in Python per la CVE di Outlook che interessa i prodotti Microsoft Office/365. Utilizzo 1. Installa pywin eseguendo pip install pywin32 2. Avvia un server SMB...

PT-2026-43401

Lumiverse is a full-featured AI chat application. Prior to 0.9.7, when the primary toSmbPathfullPath call throws, the method falls back to a dirname/basename split and only validates the directory prefix. The basename is concatenated directly into the smbclient -c script without validation...

EUVD-2019-2232

Malware in sbrugna...

Code injection

playsservice.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, executes code at a user-defined local or SMB path as SYSTEM when the executeinstaller parameter is used in an HTTP message. This occurs without properly...

Immunity Canvas: SPECIAL_LNK

Name| speciallnk ---|--- CVE| CVE-2017-8464 Exploit Pack| CANVAS Description| speciallnk Notes| References: 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8464', 'http://paper.seebug.org/357/', 'http://www.vxjump.net/files/vulnanalysis/cve-2017-8464.txt' CVE Name:...