Lucene search
+L

6956 matches found

Metasploit
Metasploit
added 2019/11/04 12:00 a.m.200 views

Microsoft Spooler Local Privilege Elevation Vulnerability

This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there is no way to remove the dll once it is loaded by the service. Essentially, on default settings, this module adds...

7.8CVSS7.7AI score0.16373EPSS
SaveExploits10
Metasploit
Metasploit
added 2019/11/04 12:00 a.m.162 views

Microsoft Spooler Local Privilege Elevation Vulnerability

This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there is no way to remove the dll once it is loaded by the service. Essentially, on default settings, this module adds...

7.8CVSS7.7AI score0.14067EPSS
SaveExploits10
Prion
Prion
added 2019/10/30 9:15 p.m.19 views

Design/Logic Flaw

ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation and execution via report print function of rexpert viewer with modified XML document. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page...

6.8CVSS8.6AI score0.01594EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2019/10/29 9:30 a.m.9 views

chromium-browser: User gesture needed for printing

Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file...

4.3CVSS7.4AI score0.00559EPSS
SaveExploits0References5
Penetration Testing Lab
Penetration Testing Lab
added 2019/10/28 9:28 a.m.88 views

Persistence – Port Monitors

The print spooler service is responsible for managing printing jobs in Windows operating systems. Interaction with the service is performed through the Print Spooler API which contains a function AddMonitor that can be used to install local port monitors and connects the configuration, data and...

3.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2019/10/21 12:00 a.m.65 views

openSUSE: Security Advisory for tcpdump (openSUSE-SU-2019:2344-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7AI score0.06816EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2019/10/21 12:00 a.m.166 views

Security update for tcpdump (important)

openSUSE Security Update: Security update for tcpdump Announcement ID: openSUSE-SU-2019:2344-1 Rating: important References: 1068716 1153098 1153332 Cross-References: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465...

9.8CVSS7.7AI score0.06816EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2019/10/16 6:22 p.m.35 views

CVE-2019-13679

Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file...

4.3CVSS4.5AI score0.00559EPSS
SaveExploits0References4
CNVD
CNVD
added 2019/10/15 12:00 a.m.13 views

Bento4 'AP4_PrintInspector::AddField' function buffer overflow vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4PrintInspector::AddField' function in the Core/Ap4Atom.cpp file in Bento4 version 1.5.1.0. The vulnerability stems from a networked system or product performing operations in...

7.8CVSS7.3AI score0.00535EPSS
SaveExploits1References1
OSV
OSV
added 2019/10/12 8:15 p.m.10 views

UBUNTU-CVE-2019-17530

An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer over-read in AP4PrintInspector::AddField in Core/Ap4Atom.cpp when called from AP4CencSampleEncryption::DoInspectFields in Core/Ap4CommonEncryption.cpp, when called from AP4Atom::Inspect in Core/Ap4Atom.cpp...

7.8CVSS7.3AI score0.00535EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2019/10/10 6:21 p.m.30 views

CVE-2018-16230

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpattrprint MPREACHNLRI...

7.5CVSS3.4AI score0.03891EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2019/10/10 6:21 p.m.30 views

CVE-2018-14467

The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgpcapabilitiesprint BGPCAPCODEMP...

7.5CVSS3.4AI score0.03985EPSS
SaveExploits0References3
CNVD
CNVD
added 2019/10/09 12:00 a.m.9 views

Tcpdump HNCP parser buffer overflow vulnerability

tcpdump is a message analysis tool. Tcpdump HNCP parser print-hncp.c:printprefix contains a security vulnerability that can be exploited by remote attackers to submit a special request that can crash an application...

7.5CVSS6.1AI score0.03739EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2019/10/07 2:39 a.m.28 views

CVE-2017-13003

The LMP parser in tcpdump before 4.9.2 has a buffer over-read in print-lmp.c:lmpprint...

9.8CVSS3.5AI score0.02389EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2019/10/05 2:33 p.m.26 views

CVE-2017-13039

The ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c, several functions...

9.8CVSS4.2AI score0.03428EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2019/10/04 9:30 p.m.20 views

CVE-2007-6692

Open redirect vulnerability in Menalto Gallery before 2.2.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the 1 Core and 2 print modules...

6.4CVSS6.9AI score0.017EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2019/10/04 9:30 p.m.29 views

CVE-2007-6691

Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to 1 "hotlink protection" in the URL rewrite module, 2 a WebDAV view in the WebDAV module, 3 a comment view in the Comment module, 4 unspecified "item information disclosure attacks" in the Core modu...

10CVSS6.8AI score0.02162EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2019/10/04 8:56 p.m.23 views

CVE-2008-5718

The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title...

9.3CVSS8AI score0.04526EPSS
SaveExploits1References3
OSV
OSV
added 2019/10/03 5:15 p.m.34 views

CVE-2019-15166

lmpprintdatalinksubobjs in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks...

7.5CVSS9.5AI score
SaveExploits0References16
OSV
OSV
added 2019/10/03 5:15 p.m.5 views

ALPINE-CVE-2019-15166

lmpprintdatalinksubobjs in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks...

7.5CVSS7.1AI score0.04986EPSS
SaveExploits0References1
Rows per page
Query Builder