Immunity Canvas: DMESG_LEAK

Name| dmesgleak ---|--- CVE| CVE-2018-14656 Exploit Pack| CANVAS Description| dmesgleak Notes| CVE Name: CVE-2018-14656 NOTES: This module gives an unpriviledged user the ability to dump a file from the kernel memory. A common scenario is to dump the /etc/shadow or kerberos tickets. Note: This on...

Immunity Canvas: COLDFUSION_RCE

Name| coldfusionrce ---|--- CVE| CVE-2018-15957 Exploit Pack| CANVAS Description| CVE-2018-15957 Notes| CVE Name: CVE-2018-15957 VENDOR: Oracle NOTES: This exploit will work against ColdFusion 2018 update 1, ColdeFusion 2016 = update 6 and ColdFusion 11 = update 14. Repeatability: Infinite...

Immunity Canvas: ALPC_TASKSCHED_LPE

Name| alpctaskschedlpe ---|--- CVE| CVE-2018-8440 Exploit Pack| CANVAS Description| ALPC Tasksched LPE Notes| CVE Name: CVE-2018-8440 Notes: WARNING: The PrintConfig.dll on the target host will be overwritten when the exploit runs. Tested: Windows 10 1703 x64 Windows 10 1803 x86 VENDOR: Microsoft...

GLEG Agora SCADA+ Exploit Pack

OVERVIEW On March 15, 2011, GLEG Ltd. announced the Agora SCADA+ Exploit Pack for Immunity’s CANVAS system. CANVAS is a penetration testing framework that is extensible using CANVAS Exploit Packs. On March 25, 2011, GLEG announced it would be adding exploits for the 35 vulnerabilities released by...

Immunity Debugger 1.85 Denial Of Service

Exploit Title: Immunity Debugger 1.85 - Denial of Service PoC Author: Gionathan "John" Reale Date: 2018-08-28 Homepage: https://www.immunityinc.com/ Software Link: https://www.immunityinc.com/products/debugger/index.html Tested Version: v1.85 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run...

Immunity Debugger 1.85 - Denial of Service

Exploit for windows platform in category dos / poc Exploit Title: Immunity Debugger 1.85 - Denial of Service PoC Author: Gionathan "John" Reale Homepage: https://www.immunityinc.com/ Software Link: https://www.immunityinc.com/products/debugger/index.html Tested Version: v1.85 Tested on OS: Window...

Immunity Debugger 1.85 - Denial of Service (PoC)

Immunity Debugger 1.85 - Denial of Service PoC Exploit Title: Immunity Debugger 1.85 - Denial of Service PoC Author: Gionathan "John" Reale Date: 2018-08-28 Homepage: https://www.immunityinc.com/ Software Link: https://www.immunityinc.com/products/debugger/index.html Tested Version: v1.85 Tested ...

Immunity Canvas: SSH_ENUM

Name| sshenum ---|--- CVE| CVE-2018-15473 Exploit Pack| CANVAS Description| sshenum Notes| CVE Name: CVE-2018-15473 VENDOR: The OpenBSD Project NOTES: Module will use different techniques in order to enumerate users on target hosts As for the file containing usernames, they should be one per line...

Immunity Canvas: SHOW_TIMER_LEAK

Name| showtimerleak ---|--- CVE| CVE-2017-18344 Exploit Pack| CANVAS Description| showtimerleak Notes| CVE Name: CVE-2017-18344 NOTES: This module gives an unpriviledged user the ability to dump a file from the kernel memory. A common scenario is to dump the /etc/shadow or kerberos tickets. Note:...

IMM2 Web Service Stack Overflow - NL

Lenovo Security Advisory: LEN-19586 Potential Impact: Stack overflow leading to memory corruption Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3774 Summary Description: A stack overflow vulnerability was discovered within the web administration service in the...

Immunity Canvas: HP_IMC_RCE

Name| hpimcrce ---|--- CVE| CVE-2017-5816 Exploit Pack| CANVAS Description| HP iMC Plat 7.2 dbman Code Execution Linux Notes| References: http://www.zerodayinitiative.com/advisories/ZDI-17-340/ Repeatability: Infinite VENDOR: Hewlett Packard CVE Url:...

Immunity Canvas: SPECTRE_SAM_LEAK

Name| spectresamleak ---|--- CVE| CVE-2017-5753-1 Exploit Pack| CANVAS Description| Spectre Sam Leak Notes| CVE Name: CVE-2017-5753 Notes: The final version should also handle Windows 2016 and 10. In fact the backend is perfectly working on Windows 2016 but libwincreds is not able to deal with...

Immunity Canvas: SPECTRE_FILE_LEAK

Name| spectrefileleak ---|--- CVE| CVE-2017-5753 Exploit Pack| CANVAS Description| Spectre File Leak Notes| CVE Name: CVE-2017-5753 Notes: This module gives an unpriviledged user the ability to dump a file from the kernel memory. A common scenario is to dump the /etc/shadow or kerberos tickets...

Immunity Canvas: GOAHEAD_ENV_RCE

Name| goaheadenvrce ---|--- CVE| CVE-2017-17562 Exploit Pack| CANVAS Description| GoAhead 3.6.5 Remote Code Exec Notes| References: https://www.elttam.com.au/blog/goahead/ Repeatability: Unlimited VENDOR: EmbedThis Software CVE Url: https://nvd.nist.gov/vuln/detail/CVE-2017-17562 CVE Name:...

Immunity Canvas: COUCHDB_ROLES

Name| couchdbroles ---|--- CVE| CVE-2017-12635 Exploit Pack| CANVAS Description| Apache CouchDB Authentication Bypass RCE Notes| CVE Name: CVE-2017-12635 VENDOR: http://couchdb.apache.org/ Notes: 12/8/2017 Windows 10 / CouchDB 2.0.0 - Exploit created Ubuntu 14.04 / CouchDB 1.5.0 - Exploit created...

Immunity Canvas: TOMCAT_FILE_UPLOAD

Name| tomcatfileupload ---|--- CVE| CVE-2017-12615 Exploit Pack| CANVAS Description| Tomcat - Arbitrary File Upload CVE-2017-12615 Notes| Repeatability: VENDOR: Apache CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12615 CVE Name: CVE-2017-12615...

International Investigatory Group Also Target of Government Spyware

The same spyware that was used against Mexican journalists, lawyers, and even a child was also used against a group of international investigators. A collective known as the Interdisciplinary Group of Independent Experts GIEI, was hit by the spyware while in Mexico in 2016. The group was appointe...

Immunity Canvas: SPECIAL_LNK

Name| speciallnk ---|--- CVE| CVE-2017-8464 Exploit Pack| CANVAS Description| speciallnk Notes| References: 'https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8464', 'http://paper.seebug.org/357/', 'http://www.vxjump.net/files/vulnanalysis/cve-2017-8464.txt' CVE Name:...

Immunity Canvas: SOLARIS_RPC_LIBNSL

Name| solarisrpclibnsl ---|--- CVE| CVE-2017-3623 Exploit Pack| CANVAS Description| Solaris libnsl RPC - Remote Heap Overflow Notes| References: http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html CVE Name: CVE-2017-3623 VENDOR: Oracle Repeatability: Unlimited Date public:...

Sync Breeze Enterprise 9.5.16 - 'GET' Remote Buffer Overflow (SEH)

!/usr/bin/env python Exploit Title: Sync Breeze Enterprise v9.5.16 - Remote buffer overflow SEH Date: 2017-03-29 Exploit Author: Daniel Teixeira Vendor Homepage: http://syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv9.5.16.exe Version: 9.5.16 Tested on: Windows ...