Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

Cisco WebEx Meetings are web conferencing solutions. A command injection vulnerability exists in the Cisco Webex Meetings Desktop App Update Service due to insufficient validation of user-supplied parameters. An attacker exploiting this vulnerability could invoke the update service command by usi...

Get System-level Code Execution Through Webex Vulnerability

A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this...

Deja-XNU

Posted by Ian Beer, Google Project Zero This blog post revisits an old bug found by Pangu Team and combines it with a new, albeit very similar issue I recently found to try to build a "perfect" exploit for iOS 7.1.2. State of the art An idea I've wanted to play with for a while is to revisit old...

Easy File Sharing Web Server 7.2 - Domain Name Buffer Overflow Exploit

Exploit for windows platform in category local exploits -------------------------------------------------------- Exploit Title: Easy File Sharing Web Server 7.2 - 'Domain Name' Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-09-19 Vendor Homepage : http://www.sharing-file.com/ Lin...

Easy File Sharing Web Server 7.2 Domain Name Buffer Overflow

-------------------------------------------------------- Exploit Title: Easy File Sharing Web Server 7.2 - 'Domain Name' Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-09-19 Vendor Homepage : http://www.sharing-file.com/ Link Software : http://www.sharing-file.com/efssetup.exe...

Easy File Sharing WS v7.2 - (Domain Name) Buffer Overflow

Document Title: =============== Easy File Sharing WS v7.2 - Domain Name Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2154 Release Date: ============= 2018-10-04 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2018-14825

CVE-2018-14825 affects Honeywell Mobile Computers (multiple CT, CN, EDA series on Android 4.4–8.1). The vulnerability is due to improper privilege management: a local attacker could create an app that binds to a Service and gains elevated system privileges, potentially accessing keystrokes, passw...

CVE-2018-14825

On Honeywell Mobile Computers CT60 running Android OS 7.1, CN80 running Android OS 7.1, CT40 running Android OS 7.1, CK75 running Android OS 6.0, CN75 running Android OS 6.0, CN75e running Android OS 6.0, CT50 running Android OS 6.0, D75e running Android OS 6.0, CT50 running Android OS 4.4, D75e...

The vulnerability of the NordVPN software for accessing VPN services arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a malicious user to execute arbitrary commands or code with SYSTEM privileges.

The vulnerability of NordVPN’s software for accessing VPN services arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or code with SYSTEM privileges,...

The vulnerability of ProtonVPN’s software for accessing VPN services arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a malicious user to execute arbitrary commands or code with SYSTEM privileges.

The vulnerability of ProtonVPN’s software for accessing VPN services arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or code with SYSTEM privilege...

Apple iOS Core Bluetooth Component Memory Corruption Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices. Core Bluetooth is one of the core Bluetooth components. A security vulnerability exists in the Core Bluetooth component in Apple iOS versions prior to 11.4 and 12. The vulnerability can be exploited by an attacker to execute...

About the security content of watchOS 5

About the security content of watchOS 5 This document describes the security content of watchOS 5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

NordVPN Code Execution Vulnerability

NordVPN is a VPN software for anonymous access to the Internet. A code execution vulnerability exists in the connection function in NordVPN version 6.14.28.0, which can be exploited by an attacker to execute arbitrary commands with system privileges with the help of a specially crafted...

ProtonVPN VPN client code execution vulnerability

ProtonVPN VPN client is a free VPN client application for anonymous access to the Internet. A code execution vulnerability exists in the linking feature of ProtonVPN VPN client version 1.5.1, which can be exploited to execute arbitrary commands with system privileges with the help of a specially...

CVE-2018-3952

An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execution of arbitrary commands with system privileges...

CVE-2018-3952

An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execution of arbitrary commands with system privileges...

CVE-2018-4010

An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause a privilege escalation, resulting in the ability to execute arbitrary commands with the system's privileges...

Privilege escalation

An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execution of arbitrary commands with system privileges...

CVE-2018-3952

CVE-2018-3952 affects NordVPN 6.14.28.0. Two-part design: a GUI (standard user) communicates with a service (system privileges) that executes OpenVPN with the user configuration. Root cause: insufficient validation of OpenVPN config lines allows injection via quoted options (e.g., "script-securit...

CVE-2018-3952

An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execution of arbitrary commands with system privileges...