64 matches found
CVE-2018-5342
Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184 are affected. The issue arises from web services running with a superuser account, enabling an attacker to write arbitrary files to the server filesystem or create an administrative account in Desktop Central. The CVE entry documents this as...
CVE-2018-5340
CVE-2018-5340 affects Zoho ManageEngine Desktop Central versions 10.0.124 and 10.0.184. The issue is that a superuser account (with permission to write to the filesystem via SQL queries) can access the database and potentially perform write operations to the filesystem. The CNVD entry explicitly ...
Cobub Razor 0.7.2 Add New Superuser Account
Exploit Title: Cobub Razor 0.7.2 Add New Superuser User Date: 2018-03-07 Exploit Author: ppbi1/[email protected]/4 Vendor Homepage: https://github.com/cobub/razor/ Software Link: https://github.com/cobub/razor/ Version: 0.72 CVE : CVE-2018-7745 There is a vulnerability that can add an admnistrat...
Cobub Razor 0.7.2 - Add New Superuser Account
Cobub Razor 0.7.2 - Add New Superuser Account Exploit Title: Cobub Razor 0.7.2 Add New Superuser User Date: 2018-03-07 Exploit Author: ppb（[email protected]） Vendor Homepage: https://github.com/cobub/razor/ Software Link: https://github.com/cobub/razor/ Version: 0.72 CVE : CVE-2018-7745 There is a...
Cobub Razor 0.7.2 - Add New Superuser Account Vulnerability
Exploit for php platform in category web applications Exploit Title: Cobub Razor 0.7.2 Add New Superuser User Exploit Author: ppb（email protected） Vendor Homepage: https://github.com/cobub/razor/ Software Link: https://github.com/cobub/razor/ Version: 0.72 CVE : CVE-2018-7745 There is a...
OpenText Documentum D2 - Remote Code Execution
OpenText Documentum D2 - Remote Code Execution / CVE Identifier: CVE-2017-5586 Vendor: OpenText Affected products: Documentum D2 version 4.x Researcher: Andrey B. Panfilov Severity Rating: CVSS v3 Base Score: 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Description: Document D2 contains vulnerable...
OpenText Documentum D2 - Remote Code Execution
/ CVE Identifier: CVE-2017-5586 Vendor: OpenText Affected products: Documentum D2 version 4.x Researcher: Andrey B. Panfilov Severity Rating: CVSS v3 Base Score: 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Description: Document D2 contains vulnerable BeanShell bsh and Apache Commons libraries and...
OpenText Documentum D2 4.x Remote Code Execution
CVE Identifier: CVE-2017-5586 Vendor: OpenText Affected products: Documentum D2 version 4.x Researcher: Andrey B. Panfilov Severity Rating: CVSS v3 Base Score: 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Description: Document D2 contains vulnerable BeanShell bsh and Apache Commons libraries and...
Design/Logic Flaw
Ansible Tower aka Ansible UI before 2.0.5 allows remote organization administrators to gain privileges by creating a superuser account...
Metasploit < 4.4 - pcap_log Plugin Privilege Escalation Exploit
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require...
Metasploit < 4.4 - pcap_log Plugin Privilege Escalation (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...
Metasploit 4.4 - pcap_log Plugin Privilege Escalation (Metasploit)
Metasploit 4.4 - pcaplog Plugin Privilege Escalation Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require...
Metasploit pcap_log Local Privilege Escalation
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...
Metasploit < v4.4 pcap_log Plugin Privilege Escalation Exploit
Exploit for windows platform in category remote exploits Exploit Title: Metasploit pcaplog plugin privilege escalation exploit Date: 16/7/2012 public 11/10/2012 refined, submitted to EDB Exploit Author: 0a29406d9794e4f9b30b3c5d6702c708 Vendor Homepage: www.metasploit.com Software Link:...
Joomla 1.6.3 CSRF Exploit
No description provided by source. This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account. / joom163.js Joomla 1.6.3 XSS - CSRF Exploit Greetz to Shardy, Xires &...
Joomla! 1.6.3 - Cross-Site Request Forgery
Joomla! 1.6.3 - Cross-Site Request Forgery This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account. / joom163.js Joomla 1.6.3 XSS - CSRF Exploit Greetz to Shardy,...
Joomla 1.6.3 CSRF Exploit
Exploit for php platform in category web applications This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account.  / joom163.js Joomla 1.6.3 XSS - CSRF Exploit...
Joomla! 1.6.3 - Cross-Site Request Forgery
This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account. / joom163.js Joomla 1.6.3 XSS - CSRF Exploit Greetz to Shardy, Xires & Stacy, Rage, coorslitedude,...
Joomla 1.6.3 Cross Site Request Forgery
This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account. / joom163.js Joomla 1.6.3 XSS - CSRF Exploit Greetz to Shardy, Xires & Stacy, Rage, coorslitedude,...
SilverStripe CMS 2.3.5 - Cross-Site Request Forgery / Open Redirection
Exploit Title: Silverstripe = 2.3.5 Cross Site Request Forgery & Open Redirection. Date: 12/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Vendor: www.silverstripe.org | Version: 2.0.0 Tested on: PHP Open Redirection: OWASP: An open redirect is an application that...