D-Link DIR-2150 xupnpd ui_upload Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which listens on TCP port 4044 by default. The...

Huawei EulerOS: Security Advisory for libtirpc (EulerOS-SA-2022-2327)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

D-Link DIR-2150 anweb websocket_data_handler Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue results...

EulerOS 2.0 SP9 : kernel (EulerOS-SA-2022-2321)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - When setting font with malicous data by ioctl cmd PIOFONT,kernel will write memory out of bounds. CVE-2021-33656 - In lgprobe and related...

EulerOS 2.0 SP9 : libtirpc (EulerOS-SA-2022-2327)

According to the versions of the libtirpc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections a...

CVE-2022-34718

Windows TCP/IP Remote Code Execution Vulnerability...

Remote code execution

Windows TCP/IP Remote Code Execution Vulnerability...

CVE-2022-34718

CVE-2022-34718 is a Windows TCP/IP remote code execution vulnerability that can be exploited by sending a crafted IPv6 packet to a host with IPSec enabled. The issue affects the Windows TCP/IP stack and relies on a flaw in handling IPv6/IPsec traffic to achieve code execution, requiring no user i...

CVE-2022-34718 Windows TCP/IP Remote Code Execution Vulnerability

...

Windows TCP/IP Remote Code Execution Vulnerability

...

KLA19245 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...

Medium: kernel

Issue Overview: An out-of-bounds read flaw was found in the Linux kernel's TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flushtoldisc function. This flaw allows a local user...

CVE-2022-26394 Unauthenticated network reconfiguration via TCP/UDP

The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail...

Windows shellcode stage, Windows x64 Reverse TCP Stager

Custom shellcode stage. Connect back to the attacker Windows x64 Module Options msf use payload/windows/x64/custom/reversetcp msf payloadreversetcp show actions ...actions... msf payloadreversetcp set ACTION msf payloadreversetcp show options ...show and set options... msf payloadreversetcp run...

Windows shellcode stage, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Custom shellcode stage. Connect back to the attacker Module Options msf use payload/windows/x64/custom/bindtcprc4 msf payloadbindtcprc4 show actions ...actions... msf payloadbindtcprc4 set ACTION msf payloadbindtcprc4 show options ...show and set options... msf payloadbindtcprc4 run -- coding:...

Windows shellcode stage, Windows x64 Bind TCP Stager

Custom shellcode stage. Listen for a connection Windows x64 Module Options msf use payload/windows/x64/custom/bindtcp msf payloadbindtcp show actions ...actions... msf payloadbindtcp set ACTION msf payloadbindtcp show options ...show and set options... msf payloadbindtcp run This module requires...

Windows shellcode stage, Reverse TCP Stager (RC4 Stage Encryption, Metasm)

Custom shellcode stage. Connect back to the attacker Module Options msf use payload/windows/x64/custom/reversetcprc4 msf payloadreversetcprc4 show actions ...actions... msf payloadreversetcprc4 set ACTION msf payloadreversetcprc4 show options ...show and set options... msf payloadreversetcprc4 ru...

Windows shellcode stage, Bind TCP Stager with UUID Support (Windows x64)

Custom shellcode stage. Listen for a connection with UUID Support Windows x64 Module Options msf use payload/windows/x64/custom/bindtcpuuid msf payloadbindtcpuuid show actions ...actions... msf payloadbindtcpuuid set ACTION msf payloadbindtcpuuid show options ...show and set options... msf...

Windows shellcode stage, Reverse TCP Stager with UUID Support (Windows x64)

Custom shellcode stage. Connect back to the attacker with UUID Support Windows x64 Module Options msf use payload/windows/x64/custom/reversetcpuuid msf payloadreversetcpuuid show actions ...actions... msf payloadreversetcpuuid set ACTION msf payloadreversetcpuuid show options ...show and set...

Windows shellcode stage, Reverse TCP Stager (IPv6)

Custom shellcode stage. Connect back to the attacker over IPv6 Module Options msf use payload/windows/custom/reverseipv6tcp msf payloadreverseipv6tcp show actions ...actions... msf payloadreverseipv6tcp set ACTION msf payloadreverseipv6tcp show options ...show and set options... msf...