FTPShell Server 6.80 - Add Account Name Buffer Overflow (SEH) Exploit

Exploit Title: FTPShell Server 6.80 - 'Add Account Name' Buffer Overflow SEH Discovery by: Luis Martinez Vendor Homepage: http://www.ftpshell.com/ Software Link: http://www.ftpshell.com/downloadserver.htm Tested Version: 6.80 Vulnerability Type: Buffer Overflow SEH Local Tested on OS: Windows XP...

Security update for spice (important)

This update for spice fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Avoid buffer overflow on image lz checks bsc1101295 This update was imported from the SUSE:SLE-12-SP3:Update update project...

Security update for spice-gtk (important)

This update for spice-gtk fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Avoid buffer overflow on image lz checks bsc1101295 This update was imported from the SUSE:SLE-12-SP3:Update update project...

iSmartViewPro 1.5 - 'DDNS' Buffer Overflow

Exploit Title: iSmartViewPro 1.5 - 'DDNS/IP/DID' Buffer Overflow Discovery by: Luis Martinez Discovery Date: 2018-09-03 Vendor Homepage: https://securimport.com/ Software Link: https://securimport.com/university/videovigilancia-ip/software/493-software-ismartviewpro-v1-5 Tested Version: 1.5...

openSUSE Security Update : libreoffice (openSUSE-2018-941)

This update for libreoffice to 6.0.5.2 fixes the following issues : Security issues fixed : - CVE-2018-10583: An information disclosure vulnerability occurs during automatic processing and initiating an SMB connection embedded in a malicious file, as demonstrated by...

openSUSE: Security Advisory for libreoffice (openSUSE-SU-2018:2532-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CuteFTP 5.0 - Buffer Overflow

Exploit Title: CuteFTP 5.0 - Buffer Overflow Author: Matteo Malvica Date: 2018-08-26 Vendor homepage: www.globalscape.com Software: CuteFTP 5.0.4 XP - build 54.8.6.1 Software Link: http://installer.globalscape.com/pub/cuteftp/archive/english/cuteftp50.exe Tested on: Windows XP Profesional SP3...

openSUSE Security Update : xen (openSUSE-2018-910) (Foreshadow)

This update for xen fixes the following security issues : - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest O...

Security update for xen (important)

This update for xen fixes the following security issues: - CVE-2018-3646: Systems with microprocessors utilizing speculative execution and address translations may have allowed unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS...

Easy RM To MP3 Converter 2.6 Stack Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title : Easy Rm to Mp3 Convertor Author = Mr.0&1IRIH email protected Version = 2.6 Tested On windows 7 32 bit Ultimate Tested On windows Vista 32 bit Tested On windows Xp SP3 Previous Exploits do NOT work on windows & versions. This...

Easy RM To MP3 Converter 2.6 Stack Buffer Overflow

Exploit Title : Easy Rm to Mp3 Convertor Date : Aug 11, 2018 Author = Mr.0&1IRIH [email protected] Version = 2.6 Tested On windows 7 32 bit Ultimate Tested On windows Vista 32 bit Tested On windows Xp SP3 Previous Exploits do NOT work on windows & versions. This one Does ! b = "\x41" 2608...

Security update for libvirt (moderate)

This update for libvirt fixes the following issues: Security issue fixed: - CVE-2018-3639: Add support for 'ssbd' and 'virt-ssbd' CPUID feature bits to address V4 Speculative Store Bypass aka "Memory Disambiguation" bsc1092885. Bug fixes: - bsc1094325: Enable virsh blockresize for XEN guests...

EulerOS 2.0 SP3 : php (EulerOS-SA-2018-1224)

According to the version of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. ext/ldap/ldap.c allows remote LDAP...

EulerOS 2.0 SP3 : ncurses (EulerOS-SA-2018-1225)

According to the version of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A NULL pointer dereference was found in the way the ncparseentry function parses terminfo data for compilation. An attacker able to provide...

EulerOS 2.0 SP3 : tomcat (EulerOS-SA-2018-1227)

According to the version of the tomcat packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are...

EulerOS 2.0 SP3 : gnupg2 (EulerOS-SA-2018-1223)

According to the version of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A data validation flaw was found in the way gnupg processes file names during decryption and signature validation. An attacker may be able to inject...

openSUSE Security Update : util-linux (openSUSE-2018-805)

This update for util-linux fixes the following issues : This non-security issue was fixed : - CVE-2018-7738: bash-completion/umount allowed local users to gain privileges by embedding shell commands in a mountpoint name, which was mishandled during a umount command by a different user bsc1084300...

Security update for xen (moderate)

This update for xen fixes the following issues: Security issues fixed: - CVE-2018-3665: Fix Lazy FP Save/Restore issue XSA-267 bsc1095242. - CVE-2018-12891: Fix possible Denial of Service DoS via certain PV MMU operations that affect the entire host XSA-264 bsc1097521. - CVE-2018-12892: Fix libxl...

openSUSE Security Update : rsyslog (openSUSE-2018-789)

This update for rsyslog fixes the following issues : The following security vulnerability was addressed : CVE-2015-3243: Make sure that log files are not created world-readable bsc935393 This update was imported from the SUSE:SLE-12-SP3:Update update project. %NASLMINLEVEL 70300 C Tenable Network...

ipPulse 1.92 Denial Of Service

Exploit Title : ipPulse 1.92 "Enter Key 'Name' - Denial of Service" POC Discovery by : Shubham Singh Known As : Spirited Wolf Twitter: @Pwsecspirit Email : [email protected] Youtube Channel : www.youtube.com/c/Pentestingwithspirit Discovery Date : 2018-07-30 Vendor Homepage :...