10-Strike Network Inventory Explorer 8.54 - Local Buffer Overflow (SEH) (DEP Bypass) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: 10-Strike Network Inventory Explorer 8.54 - Local Buffer Overflow SEHDEP Bypass Vulnerable Software: 10-Strike Network Inventory Explorer 8.54 Vendor Homepage:...

10-Strike Network Inventory Explorer 8.54 - Local Buffer Overflow (SEH) (DEP Bypass)

!/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: 10-Strike Network Inventory Explorer 8.54 - Local Buffer Overflow SEHDEP Bypass Date: 01-29-19 Vulnerable Software: 10-Strike Network Inventory Explorer 8.54 Vendor Homepage: https://www.10-strike.com/ Version: 8.54 Software Link...

ansible: Inventory variables are loaded from current working directory when running ad-hoc command that can lead to code execution

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result...

Adapt Inventory Management System 1.0 SQL Injection

Exploit Title: Adapt Inventory Management System 1.0 - SQL Injection Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.adaptinventory.com/ Software Link: https://codecanyon.net/item/adapt-inventory-management-system/22838514 Version: 1.0 Category: Webapps Tested...

Adapt Inventory Management System 1.0 - SQL Injection

Adapt Inventory Management System 1.0 - SQL Injection Exploit Title: Adapt Inventory Management System 1.0 - SQL Injection Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.adaptinventory.com/ Software Link:...

CVE-2019-0241

SAP Work and Inventory Manager AgentrySDK , before 7.0, 7.1 allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

Code injection

SAP Work and Inventory Manager AgentrySDK , before 7.0, 7.1 allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2019-0241

SAP Work and Inventory Manager AgentrySDK , before 7.0, 7.1 allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2019-0241

SAP Work and Inventory Manager AgentrySDK , before 7.0, 7.1 allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2019-0241

The CVE concerns SAP Work and Inventory Manager (Agentry_SDK, before 7.0 and 7.1). The issue is a denial of service: an attacker can cause legitimate users to be unable to access a service by crashing or flooding it. The description does not specify the exact root cause or vulnerable component be...

PT-2019-11206

Name of the Vulnerable Software and Affected Versions: SAP Work and Inventory Manager Agentry SDK versions prior to 7.1 Description: The issue allows an attacker to prevent legitimate users from accessing a service by either crashing or flooding it. Recommendations: For SAP Work and Inventory...

CVE-2019-0241: Undefined Security Weakness

SAP Work and Inventory Manager AgentrySDK , before 7.0, 7.1 allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2018-16879

Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting...

CVE-2018-16879

Ansible Tower before version 3.3.3 does not set a secure channel as it is using the default insecure configuration channel settings for messaging celery workers from RabbitMQ. This could lead in data leak of sensitive information such as passwords as well as denial of service attacks by deleting...

CVE-2018-19233

COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...

CVE-2018-19233

COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...

Hardcoded credentials

COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...

CVE-2018-19233

COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...

PT-2018-14884

Name of the Vulnerable Software and Affected Versions COMPAREX Miss Marple Enterprise Edition versions prior to 2.0 Description The issue allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file. Recommendatio...

CVE-2018-19233: Use of Hard-coded Credentials

COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...