NextVPN v4.10 - Insecure File Permissions Vulnerability

Exploit Title: NextVPN v4.10 - Insecure File Permissions Exploit Author: SajjadBnd Contact: email protected Vendor Homepage: https://vm3max.site Software Link:http://dl.spacevm.com/NextVPNSetup-v4.10.exe Version: 4.10 Tested on: Win10 Professional x64 Description The NextVPN Application was...

Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Denial of Service

Binary data 720099.prm...

Rockwell Automation/Allen-Bradley MicroLogix 1400 Series B FRN < 21.2 Denial of Service

Binary data 720100.prm...

Siemens WinCC and SIMATIC HMI Panels < 11.0.2.1 Denial of Service

Binary data 720012.prm...

CVE-2018-18435

KioWare Server version 4.9.6 and older installs by default to "C:\kiowarecom" with weak folder permissions granting any user full permission "Everyone: F" to the contents of the directory and it's sub-folders. In addition, the program installs a service called "KWSService" which runs as...

ManageEngine OpManager Privilege Escalation

Summary OpManager offers comprehensive network monitoring capabilities that help you monitor network performance, detect network faults in real time, troubleshoot errors, and prevent downtime. Being a powerful network monitor, it supports multi-vendor IT environments and can scale to fit your...

PCProtect 4 8.35 Privilege Escalation

Exploit Title : PCProtect v4.8.35 - Weak File Premissions Privilege Escalation Date : 09/11/2018 Exploit Author : Hashim Jawad - @ihack4falafel Vendor Homepage : https://www.pcprotect.com/ Vulnerable Software: https://www.pcprotect.com/download Tested on : Windows 7 Enterprise SP1 x64 Description...

Oracle MySQL 5.7.x < 5.7.5 DoS

Binary data 9939.prm...

League of Legends Screensaver - Insecure File Permissions Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: League of Legends Screensaver Insecure File Permissions Privilege Escalation CVE-ID: NA Date: 13/04/2016 Exploit Author: Vincent Yiu Contact: email protected Vendor Homepage: http://www.leagueoflegends.com Software Link:...

OVI MAIL (NOKIAMAIL) Cloud Service Detection

Binary data 8490.prm...

CVE-2013-6795

The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which triggers the download and extraction of a ZIP file that overwrites the Agent service binary...

Design/Logic Flaw

The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which triggers the download and extraction of a ZIP file that overwrites the Agent service binary...

Carbonite 'Cloud' Backup Service Detection

Binary data 6571.prm...

Rockwell Automation Service Detection (deprecated)

Binary data 6469.prm...

Apache Tomcat 7.0.x < 7.0.23 Hash Collision Denial of Service

Binary data 800616.prm...

Squid < 2.7.STABLE6 / 3.x < 3.0.STABLE13 / 3.1.x < 3.1.0.5 DoS

Binary data 4923.prm...

CVE-2007-0540

WordPress allows remote attackers to cause a denial of service bandwidth or thread consumption via pingback service calls with a source URI that corresponds to a file with a binary content type, which is downloaded even though it cannot contain usable pingback data...

Dove gray is registered as a system service method-reference for the black hole-vulnerability and early warning-the black bar safety net

A few days ago a pigeon to research registered into the system service method, I don't have pigeons, and found that it is using rundll32 to import an inf to achieve, this should be added a registry key to disable the reg script, disable regedit, are effective? Examples are as follows: Add a...

Cisco Multiple DoS (Bug ID CSCdx92043)

Binary data 2240.prm...

Qualcomm Eudora < 5.2 Long Attachment Filename Handling DoS

Binary data 1283.prm...