3058 matches found
Design/Logic Flaw
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event...
CVE-2012-3486
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event...
CVE-2012-3486
CVE-2012-3486 affects Tunnelblick (3.3beta20 and earlier). Local users can gain privileges through an OpenVPN config that triggers execution of a script on an OpenVPN event. Root cause is the configuration allowing script execution by event, enabling local privilege escalation. The provided docum...
PT-2012-4752
Name of the Vulnerable Software and Affected Versions Tunnelblick versions 3.3beta20 and earlier Description The issue allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event. Recommendations For versions...
CVE-2012-3486: Undefined Security Weakness
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies execution of a script upon occurrence of an OpenVPN event...
OS X Local Root Exploit for Viscosity OpenVPN Client
No description provided by source. !/bin/sh Viscatory zx2c4 After the hullabaloo from the Tunnelblick local root, savy Mac users began defending Viscosity, another OS X VPN client. They figured, since they spent money on Viscosity, surely it would be better designed than the free open-source...
Stable Channel Update for Chrome OS
Update 5 Sept 10 am PDT - 21 Stable wifi issues are resolved, we are rolling out a new update to 21.0.1183.89 Platform version: 2268.142.0 The Google Chrome team is happy to announce the arrival of Chrome 21 to the Stable Channel for Chrome OS. More detailed updates are available on the Google...
Windows Service Trusted Path Privilege Escalation
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/post/common' require...
Windows Service Trusted Path Privilege Escalation
Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
Microsoft Windows - Service Trusted Path Privilege Escalation (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/post/common' require...
Windows Service Trusted Path Privilege Escalation
This module exploits a logic flaw due to how the lpApplicationName parameter is handled. When the lpApplicationName contains a space, the file name is ambiguous. Take this file path as example: C:\program files\hello.exe; The Windows API will try to interpret this as two possible paths:...
Viscosity - OpenVPN Client OS X Local Root Exploit
Exploit for macOS platform in category local exploits !/bin/sh Viscatory zx2c4 After the hullabaloo from the Tunnelblick local root, savy Mac users began defending Viscosity, another OS X VPN client. They figured, since they spent money on Viscosity, surely it would be better designed than the fr...
Tunnel Blick Race Condition Local Root
/ ==== Pwnnel Blicker ==== = = = zx2c4 = = = ======================== Tunnel Blick, a widely used OpenVPN manager for OSX comes with a nice SUID executable that has more holes than you care to count. It's a treasure chest of local roots. I picked one that looked interesting, and here we have Pwnn...
Tunnel Blick Local Root Exploit Version 2
!/bin/sh Pwnnel Blicker for kids zx2c4 This is another exploit for Tunnel Blick. Other exploits for Tunnel Blick are available here: http://git.zx2c4.com/Pwnnel-Blicker/tree/ echo "+ Making vulnerable directory." mkdir -pv /tmp/pwn/openvpn/openvpn-0 echo "+ Preparing payload." cat...
Tunnelblick - Local Privilege Escalation (1)
Tunnelblick - Local Privilege Escalation 1 / ==== Pwnnel Blicker ==== = = = zx2c4 = = = ======================== Tunnel Blick, a widely used OpenVPN manager for OSX comes with a nice SUID executable that has more holes than you care to count. It's a treasure chest of local roots. I picked one tha...
Tunnelblick - Local Privilege Escalation (1)
/ ==== Pwnnel Blicker ==== = = = zx2c4 = = = ======================== Tunnel Blick, a widely used OpenVPN manager for OSX comes with a nice SUID executable that has more holes than you care to count. It's a treasure chest of local roots. I picked one that looked interesting, and here we have Pwnn...
OpenVPN Defaced by Hackers
OpenVPN Defaced by Hackers OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features Got Hacked Yesterday by Hacker called "HcJ". Hacked deface the page as shown in above picture. Words form Page: OPENVPN Hacked No Ne...
Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities
Document Title: =============== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=436 Release Date: ============= 2012-02-17 Vulnerability Laboratory ID VL-ID: ==================================== 436...
Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities
Document Title: =============== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=436 Release Date: ============= 2012-02-17 Vulnerability Laboratory ID VL-ID: ==================================== 436...
Stable Channel Update for Chromebooks
The Google Chrome team is happy to announce the release of Chrome 17 on the Stable Channel for Chromebooks Acer AC700, Samsung Series 5, and Cr-48. You can read more about the Chrome version 17.0.963.54 Platform version: 1412.186.0 Release highlights: Read about improvements to Chrome over on the...