146 matches found
Advantech WebAccess/SCADA has a Logic Flaw Vulnerability
Advantech WebAccess/SCADA is a suite of SCADA software based on a browser architecture. A logic flaw vulnerability exists in Advantech WebAccess/SCADA. The vulnerability can be exploited to gain access to modify the registry of a user's system and execute arbitrary commands on the user's system...
Microsoft Windows Lockscreen Elevation of Privilege Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A power lifting vulnerability exists in Microsoft Windows Lockscreen, which arises from a program's inability to properly load a focused image from a secure location. An attacker can...
Sophisticated Info-Stealer Targets Air-Gapped Devices via USB
The Cycldek APT group has added a previously unknown malware dubbed USBCulprit to its arsenal, aimed at reaching air-gapped devices. Cycldek a.k.a. Goblin Panda, APT 27 and Conimes has been targeting governments in Southeast Asia since 2013, according to analysis from Kaspersky, and has been...
ABB System 800xA Base License Issue Vulnerability
ABB System 800xA Base is a distributed control system from ABB Switzerland for the industrial control industry. An authorization issue vulnerability exists in ABB System 800xA Base. An attacker could use this vulnerability to read and modify registry settings related to control system...
CVE-2012-3810
Samsung Kies before 2.5.0.120942711 has registry modification...
Information disclosure
Samsung Kies before 2.5.0.120942711 has registry modification...
CVE-2012-3810
Samsung Kies before 2.5.0.120942711 has registry modification...
CVE-2012-3810
CVE-2012-3810 pertains to Samsung Kies before 2.5.0.12094_27_11, with multiple vulnerabilities arising from the CmdAgentLib and related ActiveX components. The attached documents describe: (1) CVE-2012-3810 — Arbitrary Registry Modification via CmdAgentLib, enabling manipulation of registry keys/...
ComputerDefaults
Auto-Elevate process using ComputerDefaults.exe Author: jsacco How to use: 1. Copy the batch into run.bat 2. Run it! 3. Admin Tested on Windows 10 @echo off echo UAC-Bypass by jsacco reg add "HKCU\Software\Classes\ms-settings\shell\open\command" /d "cmd.exe /c" /f && reg add...
CompMgmtLauncher
Auto-Elevate process using CompMgmtLauncher.exe Author: jsacco How to use: 1. Copy the batch into run.bat 2. Run it! 3. Admin Tested on Windows 10 @echo off echo UAC-Bypass by jsacco reg add "HKCU\Software\Classes\mscfile\shell\open\command" /d "cmd.exe /c" /f && reg add...
CB TAU Threat Intelligence Notification: Qbot/Qakbot Attempts to Evade Detection By Overwriting Itself
Qbot, or Qakbot, is a banking trojan that has been seen in the wild for at least 10 years. Recent campaigns have been often delivered by exploit kits and weaponized documents delivered via context-aware phishing campaigns. Qbot has also been suspected of delivering MegaCortex ransomware. Many...
Steam 0 day vulnerability affects 1 billion users-vulnerability warning-the black bar safety net
! The Steam platform is currently the most popular game platform steam has over 1 million registered users, with millions of users simultaneously participate in the game. Researchers in the Steam games Windows the client found a 0-day privilege escalation vulnerability, exploit the vulnerability...
Microsoft Windows - UAC Protection Bypass (Via Slui File Handler Hijack) (PowerShell) Exploit
Exploit for windows platform in category local exploits Interactive Version: function SluiHijackBypass Param ParameterMandatory=$True String$command, ValidateSet64,86 int$arch = 64 Create registry structure New-Item "HKCU:\Software\Classes\exefile\shell\open\command" -Force Set-ItemProperty -Path...
Threat Roundup for June 7 to June 14
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 07 and June 14. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...
VMware Workstation 14.1.5 VMware Player 15 - Host VMX Process COM Class Hijack Privilege Escalation
VMware Workstation 14.1.5 VMware Player 15 - Host VMX Process COM Class Hijack Privilege Escalation VMware: Host VMX Process COM Class Hijack EoP Platform: VMware Workstation Windows v14.1.5 on Windows 10. Also tested VMware Player 15. Class: Elevation of Privilege Summary: COM classes used by th...
Threat Roundup for July 6-13
Today, as we do every week, Talos is giving you a glimpse into the most prevalent threats we've observed this week — covering the dates between July 6 and 13. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed ...
Microsoft Windows - UAC Protection Bypass (Via Slui File Handler Hijack) (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/exe' require 'msf/core/exploit/powershell' class MetasploitModule 'Windows UAC Protection Bypass Via Slui File Handler Hijack', 'Description' =...
Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008: March 13, 2018
Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008: March 13, 2018 Summary An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout...
Windows UAC Protection Bypass (Via Slui File Handler Hijack)
This module will bypass UAC on Windows 8-10 by hijacking a special key in the Registry under the Current User hive, and inserting a custom command that will get invoked when any binary .exe application is launched. But slui.exe is an auto-elevated binary that is vulnerable to file handler...
Microsoft Windows 10 - WLDP/MSHTML CLSID UMCI Bypass Exploit
Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1328 Windows: WLDP/MSHTML CLSID UMCI Bypass Platform: Windows 10 S thought should be anything with UMCI Class: Security Feature Bypass Summary: The enlightened lockdown policy chec...