120 matches found
CVE-2019-1710
CVE-2019-1710 affects Cisco IOS XR 64‑bit on Cisco ASR 9000 Series routers, where the sysadmin VM isolation is broken by the secondary management interface, allowing an unauthenticated, remote attacker to access internal sysadmin applications. Reported impact includes instability, denial of servi...
The death metal suite
Intel Active Management Technology AMT is a feature provided by Intel for remote administration. If you happen to have a corporate laptop, odds are you too have AMT built into your system. To a sysadmin, AMT eases access to machines for the sake of assisting employees with technical issues, even ...
Geutebruck re_porter 16 Credential Disclosure
Exploit Title: Geutebruck reporter 16 Credentials Disclosure Date: 03-08-2018 Exploit Author: Kamil Suska Vendor Homepage: https://www.geutebrueck.com//media/public/products/descriptionsarchive/en/reporterecon7.74007IADEENFRES.pdf Version: prior 7.8.974.20 CVE-2018-15534 GET...
Cisco Issues New Patches for Critical Firewall Software Vulnerability
Cisco has released new patches for a critical vulnerability in its Adaptive Security Appliance software after further investigation revealed additional attack vectors. The company first announced the vulnerability, CVE-2018-0101, on Jan. 29. It received a Common Vulnerability Scoring System base...
Default credentials
Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with...
Move WEM SQL database to a new SQL instance with/without SysAdmin permissions
Unable to perform a migration of the WEM Database to a new SQL Server due to minimal permissions in SQL. SysAdmin permissions on new SQL Server are not allowed and thus can not be used from the WEM broker...
sysadmin privilege in EMC Documentum Content Server
Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed In 2011 Yuri Simone discovered a security flaw in EMC Documentum Content Server, which allows users with sysadmin privileges to elevate their privileges to superuser see CVE-2011-4144. On...
EMC Documentum Content Server Privilege Escalation Vulnerability
EMC Documentum Content Server suffers from a privilege escalation vulnerability. Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed In 2011 Yuri Simone discovered a security flaw in EMC Documentum Content Server, which allows users with...
EMC Documentum Content Server Privilege Escalation
Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed In 2011 Yuri Simone discovered a security flaw in EMC Documentum Content Server, which allows users with sysadmin privileges to elevate their privileges to superuser see CVE-2011-4144. On...
Microsoft SQL Server Escalate EXECUTE AS
This module can be used escalate privileges if the IMPERSONATION privilege has been assigned to the user. In most cases, this results in additional data access, but in some cases it can be used to gain sysadmin privileges. This module requires Metasploit: https://metasploit.com/download Current...
Updated wpa_supplicant and hostapd packages fix security vulnerability
A vulnerability was found in the mechanism wpacli and hostapdcli use for executing action scripts. An unsanitized string received from a remote device can be passed to a system call resulting in arbitrary command execution under the privileges of the wpacli/hostapdcli process which may be root in...
Microsoft SQL Server Escalate Db_Owner
This module can be used to escalate privileges to sysadmin if the user has the dbowner role in a trustworthy database owned by a sysadmin user. Once the user has the sysadmin role the msssqlpayload module can be used to obtain a shell on the system. This module requires Metasploit:...
EMC Documentum Content Server Multiple Privilege Escalation Vulnerabilities (ESA-2014-091)
The remote host is running a version of EMC Documentum Content Server that is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists due to improper handling of system objects that allows a user to escalate their privileges to super-user status. CVE-2014-4621 - A...
MGASA-2014-0388 Updated bash packages fix CVE-2014-6271
Updated bash packages fix security vulnerability: A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote...
Learn How DuckDuckGo Search Engine helps you to be a Good Programmer
So you want to be a Programmer? Want to learn - How to code, Debug, and Program? The Web is full of free resources that can turn you into a programmer in no time, but never knew Where to start or How to troubleshoot your programs. Learning How to be a good programmer begins with learning logic...
DuckDuckGo Goodies that every SysAdmin Should Know
DuckDuckGo, a private search engine that doesn't track your data over the internet and respects your online privacy, offers hundreds of Goodies that let you quickly do certain things like Programming, Math, Geek, Music related things. In our previous article, we have posted Cryptography hacks usi...
Windows Gather SmarterMail Password Extraction
This module extracts and decrypts the sysadmin password in the SmarterMail 'mailConfig.xml' configuration file. The encryption key and IV are publicly known. This module has been tested successfully on SmarterMail versions 10.7.4842 and 11.7.5136. This module requires Metasploit:...
CVE-2013-2717
Multiple unspecified vulnerabilities in the System Management aka SysAdmin Console in EMC Smarts Network Configuration Manager NCM through 9.2 have unknown impact and attack vectors, a different issue than CVE-2013-0935. NOTE: this might overlap CVEs for open-source server components or other...
CVE-2013-2717
EMC Smarts Network Configuration Manager (NCM) up to version 9.2 contains authentication-related vulnerabilities. CVE-2013-0935: prior to 9.2, Java RMI calls could be invoked remotely without authentication to execute arbitrary code. CVE-2013-2717: multiple unspecified vulnerabilities in the Syst...