CrestCrack

CrestCrack CrestCrack는 Crestron AirMedia AM-100v1.1.1.11 v1.2.1의 CVE-2016-5640 / CLVA-2016-05-002 취약점을 악용하는 간단한 스크립트입니다. 인수가 제공되면 CrestCrack은 netcat을 사용하여 대상과 선택한 netcat 리스너 간에 리버스 셸을 생성합니다. 설정: 1. CrestCrack 사본을 클론합니다 git clone https://github.com/vpnguy/CrestCrack 2. netcat 리스너를 실행합니다 nc -lvp 13...

CVE-2016-5640

CVE-2016-5640 Módulo Metasploit para Crestron AirMedia AM-100 RCE CVE-2016-5640 Módulo para explotar una vulnerabilidad de inyección remota de comandos en la página de diagnóstico inalámbrico de dispositivos Crestron AirMedia AM-100 con versión de firmware 1.4.0.13. Los comandos se ejecutan como ...

CVE-2016-5639

CVE-2016-5639 크레스트론 AirMedia AM-100 경로 탐색 및 해시 덤프 Metasploit 모듈 이 두 모듈은 CVE-2016-5639를 이용하여 해시를 덤프하고 경로 탐색을 통해 파일을 검색합니다. 이 모듈을 분리한 이유는 해시를 '덤프'하고, 크래킹을 위해 올바르게 포맷팅하며, 전리품에 추가하는 경험을 쌓고 싶었기 때문입니다. 제안은 언제든지 환영합니다. 취약점의 최초 발견 및 보고에 대한 모든 공로는 Cylance에게 있다고 생각합니다:...

EUVD-2017-7894

Malware in sbrugna...

EUVD-2022-37120

Malicious code in bioql PyPI...

EUVD-2022-37121

Malicious code in bioql PyPI...

EUVD-2022-43595

Malicious code in bioql PyPI...

EUVD-2022-37122

Malicious code in bioql PyPI...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-34100

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

CVE-2022-34102

Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can pause the uninstallation of an executable to gain a SYSTEM level command prompt...

CVE-2022-34101

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can place a malicious DLL in a certain path to execute code and preform a privilege escalation attack...

The vulnerability of the Crestron AirMedia collaborative presentation system lies in improper privilege handling, allowing an intruder to gain access to the command line with the SYSTEM privilege level.

The vulnerability of the Crestron AirMedia collaborative presentation system is related to incorrect privilege handling. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the command line with SYSTEM privileges...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

Privilege escalation

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-40298

CVE-2022-40298 affects Crestron AirMedia for Windows prior to 5.5.1.84. The vulnerability arises from insecure inherited permissions in the AirMedia Windows Application, enabling a low-privileged user to trigger a system repair and obtain a SYSTEM-level shell. Affected software/version: AirMedia ...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

Crestron AirMedia 安全漏洞

Crestron AirMedia is Crestron's unlimited sharing platform for laptops, PCs, smartphones or tablets. A security vulnerability exists in Crestron AirMedia for Windows prior to version 5.5.1.84, which stems from insecure inherited privileges, and can be exploited by an attacker to initiate a system...