All Access Is (or Should Be) Remote Access

With the transition to remote work, we often hear the term remote access used in unison. Typically, remote work application access is facilitated via a remote access mechanism and, presumably, local work application access is facilitated via a local access mechanism. But I argue that this...

CVE-2021-25801

A buffer overflow vulnerability in the Parseindx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file...

UBUNTU-CVE-2021-25804

A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service DOS in the application...

VideoLAN VLC media player 代码问题漏洞

VideoLAN VLC is an open source cross-platform multimedia player and framework that can play most multimedia files, as well as DVDs, audio CDs, VCDs, and various streaming protocols. a null pointer dereference vulnerability exists in "Open" in avi.c in VideoLAN VLC version 3.0.11, which can be...

Dell OpenManage Enterprise docker实例预认证RCE认证绕过漏洞（CVE-2021-21596）

Details - Remote Auth Bypass with 2 pre-auth RCEs in docker instances There is a chain of pre-auth vulnerabilities allowing to: get a shell on the redis container, as redis get a shell on the postgres container, as postgres get a full access to the postgres database bypass authentication on the w...

CVE-2021-34687

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system's Personal Key when a client attempts to make a LAN connection. The Personal Key is transmitted over the network while only being encrypted via a substitution cipher...

Information disclosure

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system's Personal Key when a client attempts to make a LAN connection. The Personal Key is transmitted over the network while only being encrypted via a substitution cipher...

CVE-2021-34687

CVE-2021-34687 affects iDrive RemotePC on Windows prior to 7.6.48. The vulnerability enables information disclosure where a man-in-the-middle can recover the system Personal Key during a LAN connection, because the key is transmitted over the network with only a substitution cipher for encryption.

CVE-2021-34687

iDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can recover a system's Personal Key when a client attempts to make a LAN connection. The Personal Key is transmitted over the network while only being encrypted via a substitution cipher...

NETGEAR GS110TPV3未认证命令注入漏洞(CVE-2021-33514)

Summary: Affected Model: NETGEAR GS110TPV3 Smart Managed Pro Switch Firmware Version: V7.0.5.2 from 2021-01-11 NETGEAR GS110TPV3 Smart Managed Pro Switch is vulnerable to a pre-auth shell injection due to incorrect input handling in setup.cgi query parameters. This allows an attacker in the same...

CVE-2021-0295

A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trigger a packet forwarding loop, leading to a partial Denial of Service DoS. The issue is caused by DVMRP packets looping on a multi-homed...

Weak Password Vulnerability in IMWorks Instant Messaging Software

IMworks enterprise instant messaging software official version is an instant messaging tool launched by the enterprise information, can assist users to build a LAN intranet. IMWorks instant messaging software has a weak password vulnerability that can be exploited by attackers to obtain sensitive...

NETGEAR WAC104身份验证绕过漏洞(CVE-2021-35973)

Summary: Affected Model: NETGEAR WAC104 Dual Band 802.11ac Wireless Access Point Firmware Version: V1.0.4.13 from 2020-09-14 NETGEAR WAC104 Access Point has multiple vulnerabilities which - chained together - allow an attacker in LAN to both change device admin's password, and gain root shell on...

Weidmueller Industrial WLAN 安全漏洞

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. A remote code execution vulnerability exists in Weidmueller Industrial WLAN devices, which stems from a specially crafted username entry that could lead to an error message buffer overflow that could be exploited...

The vulnerability in the implementation of the network authentication protocol NT LAN Manager (NTLM) on Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to elevate their privileges remotely...

Emby Version Scanner

This module attempts to identify the version of an Emby Media Server running on a host. If you wish to see all the information available, set VERBOSE to true. Use in conjunction with embyssrfscanner to locate devices vulnerable to CVE-2020-26948. Module Options msf use...

CVE-2021-0055

Insecure inherited permissions for some IntelR NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0055

Insecure inherited permissions for some IntelR NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0055

CVE-2021-0055 affects Intel NUC 9 Extreme Laptop Kit LAN Driver (LAPQC71A–D). The root cause is insecure inherited permissions, which could let an authenticated local user escalate privileges. References to Intel’s advisory INTEL-SA-00505 confirm the vulnerable state for driver versions before 10...

CVE-2021-0055

Insecure inherited permissions for some IntelR NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user to potentially enable escalation of privilege via local access...