Mail.ru: Race condition на покупке призов за баллы

Добрый день! Описание Уязвимость Race condition была обнаружена на delivery-club.ru при покупке за баллы. Запросы покупки успевают пройти до того, как происходит списание баллов. Таким образом можно успеть купить несколько товаров не тратя на это баллы. Тестирование У меня на счету было 105 балло...

Real-life social engineering. Two days in tweets

This is the write-up of my live tweets while on a recent social engineering engagement. It’s all available on my feed @ghostie I did this because I wanted to share what it's like to prep for, and work through a job, warts and all. If you can take anything away, to enhance your technique, or defen...

Zyxel Access Point Detection (HTTP)

HTTP based detection of Zyxel Access Points. This VT has been deprecated and replaced by specific detection for various Zyxel devices e.g. USG, NXC, WAC, etc.. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Mail.ru: Race condition при покупке подарков на games.mail.ru

TOCTOU conditions in games.mail.ru gift purchase functionality allowed to spend bonus points above balance...

CVE-2019-1170

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attack...

CVE-2019-1170

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attack...

Privilege escalation

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape, aka 'Windows NTFS Elevation of Privilege Vulnerability'...

CVE-2019-1170: Missing Authorization

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attack...

Johnson Controls MS-NCE2566-0 Metasys NCE Controller

Binary data 764889.prm...

Johnson Controls MS-NCE2560-0 Metasys NCE Controller

Binary data 764890.prm...

Windows NTFS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attack...

KB4511553: Windows 10 Version 1809 and Windows Server 2019 August 2019 Security Update

The remote Windows host is missing security update 4511553. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory. An attacker who successfully exploited the vulnerability could...

KB4512508: Windows 10 Version 1903 August 2019 Security Update

The remote Windows host is missing security update 4512508. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory. An attacker who successfully exploited the vulnerability could...

PT-2019-3037 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when reparse points are created by sandboxed processes, allowing sandbox escape. This could enable an attacker to...

Cisco IOS Access Points Software Input Validation Error Vulnerability

Cisco IOS Access Points APs Software is a set of software from Cisco USA dedicated to Cisco wireless access point devices. An input validation error vulnerability exists in the implementation of 802.11r Fast Transition in Cisco IOS APs Software. An attacker could exploit this vulnerability to cau...

PT-2019-13550

Name of the Vulnerable Software and Affected Versions Viral Quiz Maker - OnionBuzz plugin versions prior to 1.2.2 Description An issue in the Viral Quiz Maker - OnionBuzz plugin allows an unauthenticated user to perform a SQL injection attack. This is due to the lack of sanitization of the points...

CVE-2019-1920

CVE-2019-1920 covers a DoS in Cisco IOS Access Points Software due to incomplete error handling for 802.11r FT client authentication on a targeted interface. An unauthenticated adjacent attacker can send crafted authentication traffic to cause the device to restart. Affected products are Cisco IO...

CVE-2019-1920 Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability

A vulnerability in the 802.11r Fast Transition FT implementation for Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected interface. The vulnerability is due to a lack of complete error handling condition...

Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability

A vulnerability in the 802.11r Fast Transition FT implementation for Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected interface. The vulnerability is due to a lack of complete error handling condition...

PT-2019-2789

Name of the Vulnerable Software and Affected Versions Cisco IOS Access Points APs Software affected versions not specified Description The issue is related to insufficient input validation in the 802.11r Fast Transition implementation of Cisco IOS Access Points APs Software. This could allow a...