CrestCrack

CrestCrack CrestCrack 是一个简单的脚本，用于利用 Crestron AirMedia AM-100（v1.1.1.11 - v1.2.1）中的 CVE-2016-5640 / CLVA-2016-05-002。提供参数后，CrestCrack 将利用 netcat 在目标和您选择的 netcat 监听器之间创建反弹 shell。 设置： 1. 克隆一份 CrestCrack git clone https://github.com/vpnguy/CrestCrack 2. 启动一个 netcat 监听器 nc -lvp 1337 3. 使用你的监听器信息对目标执行...

CVE-2016-5639

CVE-2016-5639 Crestron AirMedia AM-100 路径遍历与哈希转储 Metasploit 模块 两个相似的模块，利用 CVE-2016-5639 通过路径遍历转储哈希并检索文件。我将这两个模块分开编写，因为我想获得编写能够"转储"哈希、正确格式化以用于破解，并将其添加到 loot 中的经验。欢迎任何建议。 所有原始漏洞披露与报告的功劳都应归于 Cylance，我想： https://github.com/CylanceVulnResearch/disclosures/blob/master/CLVA-2016-05-001.md...

CVE-2016-5640

CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit モジュール ファームウェアバージョンが 1.4.0.13 より前の Crestron AirMedia AM-100 デバイスのワイヤレス診断ページにおける、リモートコマンドインジェクションの脆弱性を悪用するためのモジュールです。コマンドはサービスを実行しているアカウント（通常は root）として実行されます。これは、私がチェックの作成と cmdstager の使用経験を得たかったためにモジュールを作成した、古いエクスプロイトです。...

EUVD-2017-7894

Malware in sbrugna...

EUVD-2022-37120

Malicious code in bioql PyPI...

EUVD-2022-37121

Malicious code in bioql PyPI...

EUVD-2022-37122

Malicious code in bioql PyPI...

EUVD-2022-43595

Malicious code in bioql PyPI...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-34100

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...

CVE-2022-34102

Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can pause the uninstallation of an executable to gain a SYSTEM level command prompt...

CVE-2022-34101

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can place a malicious DLL in a certain path to execute code and preform a privilege escalation attack...

The vulnerability of the Crestron AirMedia collaborative presentation system lies in improper privilege handling, allowing an intruder to gain access to the command line with the SYSTEM privilege level.

The vulnerability of the Crestron AirMedia collaborative presentation system is related to incorrect privilege handling. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the command line with SYSTEM privileges...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

Privilege escalation

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

CVE-2022-40298

CVE-2022-40298 affects Crestron AirMedia for Windows prior to 5.5.1.84. The vulnerability arises from insecure inherited permissions in the AirMedia Windows Application, enabling a low-privileged user to trigger a system repair and obtain a SYSTEM-level shell. Affected software/version: AirMedia ...

CVE-2022-40298

Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation vulnerability found in the AirMedia Windows Application, version 4.3.1.39. A low privileged user can initiate a repair of the system and gain a SYSTEM level shell...

Crestron AirMedia 安全漏洞

Crestron AirMedia is Crestron's unlimited sharing platform for laptops, PCs, smartphones or tablets. A security vulnerability exists in Crestron AirMedia for Windows prior to version 5.5.1.84, which stems from insecure inherited privileges, and can be exploited by an attacker to initiate a system...