gns3.com XSS vulnerability

Open Bug Bounty ID: OBB-573163 Description| Value ---|--- Affected Website:| gns3.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on I...

GNS3 Mac OS-X 1.5.2 ubridge Privilege Escalation

!/bin/sh GNS-3 Mac OS-X LPE local root exploit ===================================== GNS-3 on OS-X bundles the "ubridge" binary as a setuid root file. This file can be used to read arbitary files using "-f" arguement but also as it runs as root can also write arbitrary files with "pcapfile"...

GNS3 Mac OS-X 1.5.2 - ubridge Privilege Escalation Exploit

Exploit for macOS platform in category local exploits !/bin/sh GNS-3 Mac OS-X LPE local root exploit ===================================== GNS-3 on OS-X bundles the "ubridge" binary as a setuid root file. This file can be used to read arbitary files using "-f" arguement but also as it runs as roo...

GNS3 Mac OS-X 1.5.2 - 'ubridge' Local Privilege Escalation

!/bin/sh GNS-3 Mac OS-X LPE local root exploit ===================================== GNS-3 on OS-X bundles the "ubridge" binary as a setuid root file. This file can be used to read arbitary files using "-f" arguement but also as it runs as root can also write arbitrary files with "pcapfile"...

GNS3 Untrustworthy Search Path Vulnerability

GNS3 is a set of cross-platform, network virtualization software with a graphical interface. An untrusted search path vulnerability exists in GNS3 versions prior to 1.2.3. A local attacker can exploit this vulnerability to gain privileges via the Trojan horse uuid.dll file...

CVE-2015-2667

Untrusted search path vulnerability in GNS3 1.2.3 allows local users to gain privileges via a Trojan horse uuid.dll in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in GNS3 1.2.3 allows local users to gain privileges via a Trojan horse uuid.dll in an unspecified directory...

CVE-2015-2667

CVE-2015-2667 affects GNS3 1.2.3 via an untrusted search path vulnerability that allows a local attacker to gain privileges through a Trojan horse uuid.dll placed in an unspecified directory. The issue is a DLL search order hijack affecting local privilege escalation; multiple sources confirm the...

CVE-2015-2667

Removed by vendor...

CVE-2015-2667

Untrusted search path vulnerability in GNS3 1.2.3 allows local users to gain privileges via a Trojan horse uuid.dll in an unspecified directory...

GNS3 1.2.3 DLL Hijacking

/ Title: GNS3 1.2.3 DLL Hijacking Exploit uuid.dll Version: 2.0.1.7 Tested on: Windows 8 Vendor: http://www.gns3.com/ Software-Link: http://downloads.gns3.com/GNS3-1.2.3-all-in-one.exe E-Mail: osandaatunseen.is Author: Osanda Malith Jayathissa Date: 01-05-2015 /!\ Author is not responsible for an...