Powershell Exec, Windows Executable Download (http,https,ftp) and Execute

Execute an x86 payload from a command via PowerShell. Download an EXE from an HTTPS/FTP URL and execute it Module Options msf use payload/cmd/windows/powershell/downloadexec msf payloaddownloadexec show actions ...actions... msf payloaddownloadexec set ACTION msf payloaddownloadexec show options...

Design/Logic Flaw

An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Nigerian Tesla: 419 scammer gone malware distributor unmasked

Agent Tesla is a well-known data stealer written in .NET that has been active since 2014 and is perhaps one of the most popular payloads observed in malspam campaigns. While looking for threats targeting Ukraine, we identified a group we call "Nigerian Tesla" that has been dabbling into phishing...

Foxit PDF Reader 代码问题漏洞

Foxit PDF Reader is a Chinese Foxit Foxit company's PDF reader. A code issue vulnerability exists in Foxit PDF Reader version v11.2.1.53537, which originates from a code issue that contains a dereference via the NULL pointer of the component FoxitPDFReader.exe. An attacker can exploit this...

CVE-2022-28067

An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service DoS in the Sandbox via a crafted executable...

CVE-2022-28067

An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service DoS in the Sandbox via a crafted executable...

Improper access control

An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service DoS in the Sandbox via a crafted executable...

CVE-2022-28067

An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service DoS in the Sandbox via a crafted executable...

Sandboxie Classic 安全漏洞

Sandboxie Classic is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. A security vulnerability exists in Sandboxie Classic version 5.55.13 that stems from the presence of an incorrect access control issue. An attacker could exploit the vulnerability to...

CVE-2022-28067: Undefined Security Weakness

An incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a Denial of Service DoS in the Sandbox via a crafted executable...

CVE-2022-28480

ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe...

Remote code execution

Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" servicethe service is running under SYSTEM privileges and manipulate it to execute malicious...

ALLPlayer ALLMediaServer 安全漏洞

ALLMediaServer is a media player from ALLPlayer Group Ltd, Poland, which allows you to watch or play videos, listen to music or view photos on all devices TV, smartphone, Chromecast, XBOX, Smart TV. A security vulnerability exists in ALLMediaServer version 1.6, which stems from vulnerability to a...

Advantech R-SeeNet Privilege Escalation

The vulnerability of the execution file C:\R-SeeNet\mysql\bin\mysqld.exe, which is part of the monitoring service for the Advantech R-SeeNet router, relates to deficiencies in access control to the C:\R-SeeNet directory. Exploiting this vulnerability could allow an attacker to enhance their...

CVE-2022-22521

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

Code injection

In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...

Miele Benchmark Programming Tool 安全漏洞

Miele Benchmark Programming Tool is a desktop application from Miele Germany. It allows users to easily edit washing machine and tumble dryer programs and machine settings on their Miele Professional devices. A security vulnerability exists in Miele Benchmark Programming Tool versions prior to...

Virus.Win32.Qvod.b Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/c44a9580e17bad0aa27329e51b7d0ae0.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Virus.Win32.Qvod.b Vulnerability: Insecure Permissions Description: The malware writes a PE file wit...

PT-2022-15491 · Miele · Miele Benchmark Programming Tool

Name of the Vulnerable Software and Affected Versions: Miele Benchmark Programming Tool versions prior to 1.2.71 Description: The issue allows executable files manipulated by attackers to be unknowingly executed with user privileges. An attacker with low privileges may trick a user with...

IBM Planning Analytics Arbitrary File Upload Vulnerability

IBM Planning Analytics is a business planning and analysis solution from IBM Corporation in the United States. IBM Planning Analytics has an arbitrary file upload vulnerability that can be exploited to upload arbitrary executable files, leading to code execution...