Solaris libnspr NSPR_LOG_FILE Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Solaris libnspr NSPRLOGFILE Privilege Escalation', 'Description' = %q This module exploits an arbitrary file write vulnerability in the Netscape...

Solaris - libnspr NSPR_LOG_FILE Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Solaris libnspr NSPRLOGFILE Privilege Escalation', 'Description' = %q This module exploits an arbitrary file write vulnerability in the Netscape...

Solaris srsexec Arbitrary File Reader

This module exploits a vulnerability in NetCommander 3.2.3 and 3.2.5. When srsexec is executed in debug -d verbose -v mode, the first line of an arbitrary file can be read due to the suid bit set. The most widely accepted exploitation vector is reading /etc/shadow, which will reveal root's hash f...

Ettercap - A Comprehensive Suite For Man In The Middle Attacks

Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis. ETTERCAP...

Solaris libnspr NSPR_LOG_FILE Privilege Escalation

This module exploits an arbitrary file write vulnerability in the Netscape Portable Runtime library libnspr on unpatched Solaris systems prior to Solaris 10u3 which allows users to gain root privileges. libnspr versions prior to 4.6.3 allow users to specify a log file with the NSPRLOGFILE...

The vulnerability of the kernel of the Solaris and SmartOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the kernels in Solaris and SmartOS is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the NVIDIA-GFX Kernel driver for the Solaris operating system allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the NVIDIA-GFX Kernel driver for the Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data and cause service failures using ISCSI...

The vulnerability of the Kernel component of the Solaris operating system, which allows a hacker to trigger a service failure

The vulnerability of the Kernel component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures through RPC calls...

The vulnerability of the RAD component of the Solaris operating system, which allows a hacker to gain unauthorized access to protected data

The vulnerability of the RAD component of the Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using network protocols...

CVE-2017-8988

A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00. The vulnerability impacts DevMgr Earlier than 8.5.3-00 for Windows, Linux, RepMgr earlier than 8.5.3-00 for Windows, Linux and HDLM earlier than 8.5.3-00 f...

Security feature bypass

A Remote Bypass of Security Restrictions vulnerability was identified in HPE XP Command View Advanced Edition Software Earlier than 8.5.3-00. The vulnerability impacts DevMgr Earlier than 8.5.3-00 for Windows, Linux, RepMgr earlier than 8.5.3-00 for Windows, Linux and HDLM earlier than 8.5.3-00 f...

CVE-2017-8988

CVE-2017-8988 is a remote bypass of security restrictions impacting HPE XP Command View Advanced Edition Software older than 8.5.3-00. Affected components span DevMgr, RepMgr, and HDLM (Windows, Linux; HDLM also on Solaris/AIX). The vulnerability enables bypass of security checks at runtime, with...

Security Bulletin: TLS padding vulnerability affects IBM TXSeries for Multiplatforms (CVE-2014-8730)

Summary Transport Layer Security TLS padding vulnerability via a POODLE Padding Oracle On Downgraded Legacy Encryption like attack affects TXSeries for Multiplatforms. Vulnerability Details CVE-ID: CVE-2014-8730 DESCRIPTION: Product could allow a remote attacker to obtain sensitive information,...

Sun Solaris 11.3 AVS - Local Kernel root Exploit

Exploit for solaris platform in category local exploits / Exploit Title: Solaris/OpenSolaris AVS kernel code execution Google Dork: if applicable Date: 24/7/2018 Exploit Author: mu-b Vendor Homepage: oracle.com Software Link: Version: Solaris 10, Solaris Sun Opensolaris include include include...

Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation

/ Exploit Title: Solaris/OpenSolaris AVS kernel code execution Google Dork: if applicable Date: 24/7/2018 Exploit Author: mu-b Vendor Homepage: oracle.com Software Link: Version: Solaris 10, Solaris Sun Opensolaris include include include include include include include include include include...

Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation

Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation / Exploit Title: Solaris/OpenSolaris AVS kernel code execution Google Dork: if applicable Date: 24/7/2018 Exploit Author: mu-b Vendor Homepage: oracle.com Software Link: Version: Solaris 10, Solaris Sun Opensolaris include include include...

Sun Solaris 11.3 AVS Local Kernel Root

/ Exploit Title: Solaris/OpenSolaris AVS kernel code execution Google Dork: if applicable Date: 24/7/2018 Exploit Author: mu-b Vendor Homepage: oracle.com Software Link: Version: Solaris 10, Solaris Sun Opensolaris include include include include include include include include include include...

shadowbroker

This repository, jasonhan233/shadowbroker, is an offensive tool collection containing exploits and payloads. The repository was initially reported for containing sensitive data, and several files were deleted as a result. The remaining files include a mix of exploit code, payloads, and...

The vulnerability of the NAS Device Addition component in the Solaris Cluster software allows a hacker to gain full control over the application.

The vulnerability of the NAS Device Addition component in the Solaris Cluster software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the RPC network protocol...

The vulnerability of the Availability Suite Service kernel component of the Oracle Solaris operating system allows a perpetrator to execute arbitrary code and gain elevated privileges.

The vulnerability of the AVS Service component in the Oracle Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...