824 matches found
Microsoft Office Word MSHTML Remote Code Execution Exploit
This Metasploit module creates a malicious docx file that when opened in Word on a vulnerable Windows system will lead to code execution. This vulnerability exists because an attacker can craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering...
November 22, 2021-KB5007292 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 11
None None...
November 19, 2021-KB5007293 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2
None None...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4 images and security updates
Red Hat Advanced Cluster Management for Kubernetes 2.4.0 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
November 9, 2021-KB5007152 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...
November 9, 2021-KB5006364 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2
None None...
November 9, 2021-KB5006365 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, and Windows Server, version 20H2, and Windows Version 21H1
None None...
Browse the session filesystem in a Web Browser
This module allows you to browse the session filesystem via a local browser window. Module Options msf use post/multi/manage/fileshare msf postfileshare show actions ...actions... msf postfileshare set ACTION msf postfileshare show options ...show and set options... msf postfileshare run This...
October 12, 2021-KB5006065 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...
October 12, 2021-KB5005539 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, Windows Server, version 20H2, and Windows Version 21H1
None None...
October 12, 2021-KB5005537 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 11
None None...
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Backdoor Account
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Hidden Backdoor Account Write Access Vendor: FatPipe Networks Inc. Product web page: https://www.fatpipeinc.com Affected version: WARP / IPVPN / MPVPN 10.2.2r38 10.2.2r25 10.2.2r10 10.1.2r60p82 10.1.2r60p71 10.1.2r60p65 10.1.2r60p58s1 10.1.2r60p58...
VMware vCenter Server Analytics (CEIP) Service File Upload
This module exploits a file upload in VMware vCenter Server's analytics/telemetry CEIP service to write a system crontab and execute shell commands as the root user. Note that CEIP must be enabled for the target to be exploitable by this module. CEIP is enabled by default. Module Options msf use...
Siemens RUGGEDCOM ROX Information Disclosure Vulnerability
RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...
Siemens RUGGEDCOM ROX Elevation of Privilege Vulnerability
RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...
Unspecified Vulnerability in Siemens RUGGEDCOM ROX
RUGGEDCOM products offer a level of reliability that sets the standard for communication networks deployed in harsh environments.The RUGGEDCOM RX1400 is a multi-protocol intelligent node that combines Ethernet switching, routing, and application hosting functionality with a variety of wide-area...
September 14, 2021—KB5005565 (OS Builds 19041.1237, 19042.1237, and 19043.1237)
None None...
September 14, 2021—KB5005568 (OS Build 17763.2183)
None None...
Fighting the Rogue Toaster Army: Why Secure Coding in Embedded Systems is Our Defensive Edge
There are plenty of pop culture references to rogue AI and robots, and appliances turning on their human masters. It is the stuff of science fiction, fun, and fantasy, but with IoT and connected devices becoming more prevalent in our homes, we need more discussion around cybersecurity and safety...