Path traversal

The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system...

CVE-2017-9511

The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system...

CVE-2017-9511

The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to read arbitrary files via a path traversal vulnerability when Fisheye or Crucible is running on the Microsoft Windows operating system...

WebClientPrint Processor 2.0.15.190 Print Jobs Remote Code Execution

Advisory: WebClientPrint Processor 2.0: Remote Code Execution via Print Jobs RedTeam Pentesting discovered that malicious print jobs can be used to trigger a remote code execution vulnerability in WebClientPrint Processor WCPP. These print jobs may be distributed via specially crafted websites an...

WebClientPrint Processor 2.0.15.190 Print Jobs Remote Code Execution Vulnerability

WebClientPrint Processor version 2.0.15.109 suffers from a remote code execution vulnerability via print jobs. Advisory: WebClientPrint Processor 2.0: Remote Code Execution via Print Jobs RedTeam Pentesting discovered that malicious print jobs can be used to trigger a remote code execution...

WebClientPrint Processor 2.0.15.109 TLS Validation

Advisory: WebClientPrint Processor 2.0: No Validation of TLS Certificates RedTeam Pentesting discovered that WebClientPrint Processor WCPP does not validate TLS certificates when initiating HTTPS connections. Thus, a man-in-the-middle attacker may intercept and/or modify HTTPS traffic in transit...

Microsoft Windows Search Remote Code Execution Vulnerability (CVE-2017-8543)

By sending two malformed Windows Search Protocol packets over SMB, Nessus was able to overflow an allocated buffer. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid102683; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/08/12";...

Microsoft Windows Search Type Confusion (CVE-2017-8620)

A remote code execution vulnerability exists in the Windows Search service of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...

PowerSAP: A PowerShell SAP Security Assessment Tool!

PenTestIT RSS Feed This post is about PowerSAP, a tool that was included in this years BlackHat Arsenal. What I like about this tool is that it does not try to re-invent the wheel and yet keeps it's source code open for all of us to see and understand. The author @Sn0rkY is upfront about this and...

Microsoft Windows Multiple Vulnerabilities (KB4034681)

This host is missing a critical security update according to Microsoft KB4034681 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4034658)

This host is missing a critical security update according to Microsoft KB4034658 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4034660)

This host is missing a critical security update according to Microsoft KB4034660 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows 8.1 (x64) - RGNOBJ Integer Overflow (MS16-098) (2) Exploit

Exploit for windows platform in category local exploits Sources: - https://github.com/sensepost/gdi-palettes-exp - https://sensepost.com/blog/2017/abusing-gdi-objects-for-ring0-primitives-revolution/ Windows 7 SP1 x86 exploit presented at DEF CON 25 involving the abuse of a newly discovered GDI...

Microsoft Windows PDF Library Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft USA.PDF library is one of the PDF libraries. A remote code execution vulnerability exists in PDF Library in Microsoft Windows, which stems from the program failing to properly handle objects in memory. A remote attacker can...

Microsoft Windows NetBIOS Denial of Service Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. NetBIOS is one of the network input\output system protocols. A denial of service vulnerability exists in NetBIOS in Microsoft Windows, which arises from the program's failure to properly handle NetBIO...

Microsoft Windows JET Database Engine Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.JET Database Engine is one of the database engines. A remote code execution vulnerability exists in JET Database Engine in Microsoft Windows. A remote attacker can exploit this vulnerability to execute code on an affected...

Microsoft Windows Volume Manager Extension Driver Information Disclosure Vulnerability (KB4034744)

This host is missing an important security update according to Microsoft KB4034744 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Error Reporting Elevation of Privilege Vulnerability (KB4035679)

This host is missing an important security update according to Microsoft KB4035679 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB4035055)

This host is missing an important security update according to Microsoft KB4035055 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB4034664)

This host is missing a critical security update according to Microsoft KB4034664 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...