CrestCrack

CrestCrack CrestCrack は、Crestron AirMedia AM-100 v1.1.1.11 - v1.2.1 の CVE-2016-5640 / CLVA-2016-05-002 を悪用するシンプルなスクリプトです。引数が指定されると、CrestCrack は netcat を利用して、対象マシンと選択した netcat リスナーとの間にリバースシェルを作成します。 セットアップ: 1. CrestCrack のコピーをクローンします git clone https://github.com/vpnguy/CrestCrack 2. netcat...

CVE-2016-5640

CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit 모듈 펌웨어 버전 1.4.0.13의 Crestron AirMedia AM-100 기기의 무선 진단 페이지에서 원격 명령 주입 취약점을 악용하는 모듈입니다. 명령은 서비스를 실행하는 계정일반적으로 root으로 실행됩니다. 제가 체크 작성과 cmdstager 사용 경험을 쌓기 위해 모듈을 작성한 오래된 익스플로잇입니다 . 취약점의 최초 공개 및 작성에 대한 모든 공로는 Cylance에게 있습니다, 아마도:...

CVE-2016-5639

CVE-2016-5639 Crestron AirMedia AM-100 Traversal- und Hashdump-Metasploit-Module Zwei ähnliche Module, die CVE-2016-5639 ausnutzen, um Hashes zu dumpen und Dateien per Path Traversal abzurufen. Ich habe diese Module getrennt erstellt, weil ich Erfahrung damit sammeln wollte, etwas zu schreiben, d...

EUVD-2017-7894

Malware in sbrugna...

EUVD-2022-37120

Malicious code in bioql PyPI...

EUVD-2022-37121

Malicious code in bioql PyPI...

EUVD-2022-43595

Malicious code in bioql PyPI...

EUVD-2022-37122

Malicious code in bioql PyPI...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-34100

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

CVE-2022-34102

Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can pause the uninstallation of an executable to gain a SYSTEM level command prompt...

CVE-2022-34101

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can place a malicious DLL in a certain path to execute code and preform a privilege escalation attack...

The vulnerability of the Crestron AirMedia collaborative presentation system lies in improper privilege handling, allowing an intruder to gain access to the command line with the SYSTEM privilege level.

The vulnerability of the Crestron AirMedia collaborative presentation system is related to incorrect privilege handling. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the command line with SYSTEM privileges...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

Privilege escalation

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-40298

CVE-2022-40298 affects Crestron AirMedia for Windows prior to 5.5.1.84. The vulnerability arises from insecure inherited permissions in the AirMedia Windows Application, enabling a low-privileged user to trigger a system repair and obtain a SYSTEM-level shell. Affected software/version: AirMedia ...

Crestron AirMedia 安全漏洞

Crestron AirMedia is Crestron's unlimited sharing platform for laptops, PCs, smartphones or tablets. A security vulnerability exists in Crestron AirMedia for Windows prior to version 5.5.1.84, which stems from insecure inherited privileges, and can be exploited by an attacker to initiate a system...