CVE-2020-28921

The CVE-2020-28921 entry concerns Devid Espenschied PC Analyser (up to version 4.10). The kernel driver PCADRVX64.SYS exposes IOCTLs that let a low-privilege user read/write arbitrary MSRs, enabling arbitrary Ring-0 code execution and privilege escalation. The vulnerability is local (ATT&CK conte...

CVE-2020-28922

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write arbitrary physical memory. This could lead to arbitrary Ring-0 code execution and escalation of privileges...

CVE-2020-28922

CVE-2020-28922 affects Devid Espenschied PC Analyser up to version 4.10, where the PCADRVX64.SYS kernel driver exposes IOCTLs that allow a low-privilege user to read and write arbitrary physical memory. This leads to potential arbitrary Ring-0 code execution and privilege escalation. The connecte...

Devid Espenschied PC Analyser Security Breach

Devid Espenschied Devid Espenschied PC Analyser is a software for diagnostics, stress testing, and configuration comparison of PC systems from Devid Espenschied, Germany. A security vulnerability exists in Devid Espenschied PC Analyser version 4.10 and earlier versions, which stems from the...

Devid Espenschied PC Analyser License Issue Vulnerability

Devid Espenschied Devid Espenschied PC Analyser is a software for diagnostics, stress testing, and configuration comparison of PC systems from Devid Espenschied, Germany. A security vulnerability exists in Devid Espenschied PC Analyser version 4.10 and earlier versions, which stems from the...

Embedded device research. The tools you’ll need

Over the last couple of years, we’ve run many courses on embedded device security. The focus is often defensive, but all the courses have an aspect of offensive: hacking demonstration and real devices so that you can understand the mindset of an attacker. To hack devices, you need tools. And the...

DEBIAN-CVE-2018-12483

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscoveranalyser rzo GET parameter is concatenated to a string used in an exec call in the PHP code. Authentication is needed in order to exploit this vulnerabili...

UBUNTU-CVE-2018-12483

OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the content of the ipdiscoveranalyser rzo GET parameter is concatenated to a string used in an exec call in the PHP code. Authentication is needed in order to exploit this vulnerabili...

pwdlyser - Python-based CLI Password Analyser (Reporting Tool)

The 'pwdlyser' tool is a Python-based CLI script that automates the arduous process of manually reviewing cracked passwords during password audits following security assessments or penetration tests. There are likely some false positives/negatives, so please use at your own discretion. Installati...

M Performance Drive Analyser - External URLs, Possible privilege escalation, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application M Performance Drive Analyser published at the 'play' market has multiple vulnerabilities...

freesiteworth.com Open Redirect vulnerability

Vulnerable URL: http://freesiteworth.com/seo-analyser/redirect.php?url=https://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:36 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 6658...

[Hook Analyser v2.6] Application (and Malware) Analysis tool

Application and Malware Analysis tool. Hook Analyser is a hook tool which could be potentially helpful in reversing application and analysing malwares. Changelog v2.6 Added new signatures and removed redundant ones Bug fixes – Many thanks for community users to reporting them. Fixed start-up erro...

RIPS 0.53 Local File Inclusion

RIPS = 0.53 Multiple Local File Inclusion Vulnerabilities Google Dork: allintitle: "RIPS - A static source code analyser for vulnerabilities in PHP scripts" Althout this script is not intended to be accesible from internet, there are some websites that host it. Download:...

Qualys and Malware Analyser - Online malware scanning engine !

Qualys and Malware Analyser - Online malware scanning engine ! Qualys and Malware Analyser Author : Beenu Arora, recently came into an agreement which will allow Qualys to use Malware Analyser tool on its online malware scanning engine. This would enable the users to perform more comprehensive...

Joomla Groups Blind SQL Injection

Joomla component "comgroups" Blind SQL injection vulnerability Xploited by : PrincePwn3r Component Version : 1.0 Dork : inurl:"index.php?option=comgroups" Contact : 2p0wn0rn0t2p0wnatgmail.com...

Debian Security Advisory DSA 718-2 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 718-2. OpenVAS Vulnerability Test $Id: deb7182.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 718-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 853-1 (ethereal)

The remote host is missing an update to ethereal announced via advisory DSA 853-1. Several security problems have been discovered in ethereal, a commonly used network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2360 Memory...

Debian DSA-920-1 : ethereal - buffer overflow

A buffer overflow has been discovered in ethereal, a commonly used network traffic analyser that causes a denial of service and may potentially allow the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

eIQnetworks License Manager Remote Buffer Overflow Exploit (494)

Exploit for unknown platform in category remote exploits ================================================================ eIQnetworks License Manager Remote Buffer Overflow Exploit 494 ================================================================ !/usr/bin/perl -w metasploit module for EIQ...

Debian DSA-853-1 : ethereal - several vulnerabilities

Several security problems have been discovered in ethereal, a commonly used network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2360 Memory allocation errors in the LDAP dissector can cause a denial of service. - CAN-2005-2361...