Registry-Recon - Cobalt Strike Aggressor Script That Performs System/AV/EDR Recon

Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon. Author: Jess Hires Description As a red-team practitioner, we are often using tools that attempt to fingerprint details about a compromised system, preferably in the most stealthy way possible. Some of our usual tooling for this...

CVE-2020-23889

A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted ico file...

Design/Logic Flaw

A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

Design/Logic Flaw

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23901

Summary (CVE-2020-23901) : The vulnerability affects WildBit Viewer v6.6. According to the provided reports, the issue is a User Mode Write AV in Editor+0x5d15 that can be triggered by a crafted tga file , leading to a denial of service (DoS) . Connected documents corroborate a DoS impact from a ...

CVE-2020-23899

WildBit Viewer v6.6 is affected by a buffer-related vulnerability in Editor+0x5f91 that allows a crafted TGA file to cause a denial of service. The issue is documented across multiple sources (CNVD/CNNVD/Red Hat entry) as a buffer overflow/AV leading to DoS. Affected component: Editor+0x5f91 in W...

CVE-2020-23898

CVE-2020-23898 affects WildBit Viewer v6.6, where a vulnerability in the Editor component at offset 0x5ea2 allows a user-mode write access that can cause a denial of service when processing specially crafted TGA files. The CNVD entry also describes a buffer overflow in Editor 0x5ea2, aligning wit...

CVE-2020-23895

CVE-2020-23895 affects WildBit Viewer 6.6, with a buffer overflow in Editor+0x76af that can be triggered by a specially crafted TIFF file to cause a denial of service. The vulnerability is documented across multiple feeds (NVD/Red Hat/CNVD/CVE lists, etc.), confirming the same root cause and impa...

CVE-2020-23894

A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23894

WildBit Viewer v6.6 is affected by CVE-2020-23894 due to a User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268, enabling denial of service via a specially crafted TIFF file. The Red Hat advisory and CNVD/CNNVD entries corroborate the same root cause and impact (DoS). Public details in the pr...

CVE-2020-23893

CVE-2020-23893 affects WildBit Viewer v6.6. A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 allows a crafted TIFF file to cause a denial of service. The payload is a local impact (due to local access vector) with availability impact reported as High in some references; conc...

CVE-2020-23889

WildBit Viewer vulnerability CVE-2020-23889 affects version 6.6. A Type: user-mode write access violation arises from Editor!TMethodImplementationIntercept+0x4189c6 when processing a crafted ICO file, leading to a denial of service. The report(s) in multiple feeds (NVD, Red Hat, CNVD, CNVD-derive...

CVE-2020-23888

WildBit Viewer v6.6 is affected by CVE-2020-23888 due to a User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3, which can be triggered by a specially crafted PSD file to cause a denial of service. Multiple connected sources corroborate the issue and frame it as a buffer-related v...

av-iq.com.au Cross Site Scripting vulnerability OBB-2239206

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

DCOM abuse and lateral movement with Cobalt Strike

Introduction When researching lateral movement techniques I came across a post from Raphael Mudge of Cobalt Strike fame. He details scripting an Aggressor Script for Matt Nelson’s MMC20.Application Lateral Movement technique. Reading that post spurred me to make my own DCOM based lateral movement...

DonPAPI - Dumping DPAPI Credz Remotely

Dumping revelant information on compromised targets without AV detection DPAPI dumping Lots of credentials are protected by DPAPI. We aim at locating those "secured" credentials, and retreive them using : User password Domaine DPAPI BackupKey Local machine DPAPI Key protecting TaskScheduled blob...

av-jet.ru Cross Site Scripting vulnerability OBB-2193003

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

av-iq.com Cross Site Scripting vulnerability OBB-2193002

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Why is Cybersecurity Failing Against Ransomware?

Yes, security is hard – no one is ever 100 percent safe from the threats lurking out there. But how is it that time and time again, companies – big companies – are continuing to fall for ransomware attacks? Why aren’t we getting any better at preventing them? Let’s explore the main reasons why,...

The vulnerability of the AVEVA System Platform, a software for managing production processes; AVEVA WorkTasks, software for decision-making support on mobile devices; AVEVA Mobile Operator, a system for operational production management; AVEVA Manufacturing Execution System, software for integrated production management; AVEVA Batch Management, software for batch-based production control; AVEVA Enterprise Data Management, a software platform for enterprise data management. This vulnerability is related to an uncontrolled element in the search process, allowing attackers to escalate their privileges.

The vulnerabilities of the AVEVA System Platform, which is used for dispatching control applications; AVEVA WorkTasks, which is software for managing production processes; AVEVA Mobile Operator, which is software for supporting decision-making on mobile devices; AVEVA Manufacturing Execution...