CVE-2012-3486

CVE-2012-3486 affects Tunnelblick (3.3beta20 and earlier). Local users can gain privileges through an OpenVPN config that triggers execution of a script on an OpenVPN event. Root cause is the configuration allowing script execution by event, enabling local privilege escalation. The provided docum...

OS X Local Root Exploit for Viscosity OpenVPN Client

No description provided by source. !/bin/sh Viscatory zx2c4 After the hullabaloo from the Tunnelblick local root, savy Mac users began defending Viscosity, another OS X VPN client. They figured, since they spent money on Viscosity, surely it would be better designed than the free open-source...

Stable Channel Update for Chrome OS

Update 5 Sept 10 am PDT - 21 Stable wifi issues are resolved, we are rolling out a new update to 21.0.1183.89 Platform version: 2268.142.0 The Google Chrome team is happy to announce the arrival of Chrome 21 to the Stable Channel for Chrome OS. More detailed updates are available on the Google...

Windows Service Trusted Path Privilege Escalation

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Microsoft Windows - Service Trusted Path Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/post/common' require...

Windows Service Trusted Path Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/post/common' require...

Windows Service Trusted Path Privilege Escalation

This module exploits a logic flaw due to how the lpApplicationName parameter is handled. When the lpApplicationName contains a space, the file name is ambiguous. Take this file path as example: C:\program files\hello.exe; The Windows API will try to interpret this as two possible paths:...

Viscosity - OpenVPN Client OS X Local Root Exploit

Exploit for macOS platform in category local exploits !/bin/sh Viscatory zx2c4 After the hullabaloo from the Tunnelblick local root, savy Mac users began defending Viscosity, another OS X VPN client. They figured, since they spent money on Viscosity, surely it would be better designed than the fr...

Tunnel Blick Race Condition Local Root

/ ==== Pwnnel Blicker ==== = = = zx2c4 = = = ======================== Tunnel Blick, a widely used OpenVPN manager for OSX comes with a nice SUID executable that has more holes than you care to count. It's a treasure chest of local roots. I picked one that looked interesting, and here we have Pwnn...

Tunnelblick - Local Privilege Escalation (1)

Tunnelblick - Local Privilege Escalation 1 / ==== Pwnnel Blicker ==== = = = zx2c4 = = = ======================== Tunnel Blick, a widely used OpenVPN manager for OSX comes with a nice SUID executable that has more holes than you care to count. It's a treasure chest of local roots. I picked one tha...

Tunnel Blick Local Root Exploit Version 2

!/bin/sh Pwnnel Blicker for kids zx2c4 This is another exploit for Tunnel Blick. Other exploits for Tunnel Blick are available here: http://git.zx2c4.com/Pwnnel-Blicker/tree/ echo "+ Making vulnerable directory." mkdir -pv /tmp/pwn/openvpn/openvpn-0 echo "+ Preparing payload." cat...

Tunnelblick - Local Privilege Escalation (1)

/ ==== Pwnnel Blicker ==== = = = zx2c4 = = = ======================== Tunnel Blick, a widely used OpenVPN manager for OSX comes with a nice SUID executable that has more holes than you care to count. It's a treasure chest of local roots. I picked one that looked interesting, and here we have Pwnn...

OpenVPN Defaced by Hackers

OpenVPN Defaced by Hackers OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features Got Hacked Yesterday by Hacker called "HcJ". Hacked deface the page as shown in above picture. Words form Page: OPENVPN Hacked No Ne...

Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=436 Release Date: ============= 2012-02-17 Vulnerability Laboratory ID VL-ID: ==================================== 436...

Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities

Document Title: =============== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=436 Release Date: ============= 2012-02-17 Vulnerability Laboratory ID VL-ID: ==================================== 436...

Stable Channel Update for Chromebooks

The Google Chrome team is happy to announce the release of Chrome 17 on the Stable Channel for Chromebooks Acer AC700, Samsung Series 5, and Cr-48. You can read more about the Chrome version 17.0.963.54 Platform version: 1412.186.0 Release highlights: Read about improvements to Chrome over on the...

Famous VPN service Proxpn compromised

Famous VPN service Proxpn compromised proXPN is one of the famous VPN client based on OpenVPN Service, today hacked by hacked named "TurkisH-RuleZ". The Server is seems to be Compromised in this Hacking case. Compromised url is h and Mirror of Hack is available here...

OpenVPN Server Detection

The remote host is running an OpenVPN server. Based on its responses, the remote host appears to be in TLS or preshared key mode. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56022; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate",...

Samsung hires Android hacker Cyanogen

Samsung hires Android hacker Cyanogen Steve 'Cyanogen' Kondik is best known as the creator of the CyanogenMod for Android, an after market customised firmware bringing new features and functionality to the Android platform. There's no information yet on whether Samsung is interested in CyanogenMo...

Mandriva Update for openvpn MDVA-2010:025 (openvpn)

Check for the Version of openvpn OpenVAS Vulnerability Test Mandriva Update for openvpn MDVA-2010:025 openvpn Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...