6696 matches found
Windows ‘Deletebug’ Zero-Day Allows Privilege Escalation, Destruction
A proof-of-concept exploit for a Windows zero-day that works on fully patched Windows 10 machines has been released by a security researcher. It allows an attacker to delete any kind of file on a victim machine, including system data. The flaw no CVE has been assigned since it was just exposed on...
Hacker Discloses New Windows Zero-Day Exploit On Twitter
A security researcher with Twitter alias SandboxEscaper—who two months ago publicly dropped a zero-day exploit for Microsoft Windows Task Scheduler—has yesterday released another proof-of-concept exploit for a new Windows zero-day vulnerability. SandboxEscaper posted a link to a Github page hosti...
Hacker Discloses New Windows Zero-Day Exploit On Twitter
A security researcher with Twitter alias SandboxEscaper—who two months ago publicly dropped a zero-day exploit for Microsoft Windows Task Scheduler—has yesterday released another proof-of-concept exploit for a new Windows zero-day vulnerability. SandboxEscaper posted a link to a Github page hosti...
Partner Perspectives: The Power of Shared Intelligence: Juniper Sky ATP and Cb Response
Scott Emo is the Director of Field Readiness, Security, for Juniper Networks. Uncover and Mitigate the Most Sophisticated Cyber Attacks The rapid growth of emerging technologies, combined with an increasing number of connected devices running business-critical applications in highly distributed...
Microsoft Data Sharing - Local Privilege Escalation (PoC)
Microsoft Data Sharing - Local Privilege Escalation PoC Bug description: RpcDSSMoveFromSharedFilehandle,L"token",L"c:\blah1\pci.sys"; This function exposed over alpc, has a arbitrary delete vuln. Hitting the timing was pretty annoying. But my PoC will keep rerunning until...
Microsoft Data Sharing - Local Privilege Escalation (PoC)
Bug description: RpcDSSMoveFromSharedFilehandle,L"token",L"c:\blah1\pci.sys"; This function exposed over alpc, has a arbitrary delete vuln. Hitting the timing was pretty annoying. But my PoC will keep rerunning until c:\windows\system32\drivers\pci.sys is deleted. I believe it's impossible to hit...
MV Video Sharing Software 1.2 SQL Injection
Exploit Title: MV Video Sharing Software 1.2 - 'searchname' SQL Injection Dork: N/A Date: 2018-10-16 Exploit Author: Ihsan Sencan Vendor Homepage: https://melerovideo.com/software/ Software Link: https://sourceforge.net/projects/mvvideosharingsoftware/ Version: 1.2 Category: Webapps Tested on:...
Easy File Sharing Web Server 7.2 - Domain Name Buffer Overflow Exploit
Exploit for windows platform in category local exploits -------------------------------------------------------- Exploit Title: Easy File Sharing Web Server 7.2 - 'Domain Name' Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-09-19 Vendor Homepage : http://www.sharing-file.com/ Lin...
Easy File Sharing WS v7.2 - (Domain Name) Buffer Overflow
Document Title: =============== Easy File Sharing WS v7.2 - Domain Name Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2154 Release Date: ============= 2018-10-05 Vulnerability Laboratory ID VL-ID: ====================================...
Easy File Sharing Web Server 7.2 Domain Name Buffer Overflow
-------------------------------------------------------- Exploit Title: Easy File Sharing Web Server 7.2 - 'Domain Name' Buffer Overflow Exploit Exploit Author : ZwX Exploit Date: 2018-09-19 Vendor Homepage : http://www.sharing-file.com/ Link Software : http://www.sharing-file.com/efssetup.exe...
Easy File Sharing WS v7.2 - (Domain Name) Buffer Overflow
Document Title: =============== Easy File Sharing WS v7.2 - Domain Name Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2154 Release Date: ============= 2018-10-04 Vulnerability Laboratory ID VL-ID: ====================================...
Chaturbate: Cross-origin resource sharing: arbitrary origin trusted on chatws25.stream.highwebmedia.com
Very low-quality reports, such as those which only contain automated output, will be rejected. Summary Hi, i was able to discover a number of instances on chatws25.stream.highwebmedia.com were the application accepts an arbitrarily supplied origin. The application implements an HTML5 cross-origin...
Easy File Sharing WS v7.2 - (UserId) Buffer Overflow
Document Title: =============== Easy File Sharing WS v7.2 - UserId Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2149 Release Date: ============= 2018-10-02 Vulnerability Laboratory ID VL-ID: ==================================== 2149...
Easy File Sharing WS v7.2 - (UserId) Buffer Overflow
Document Title: =============== Easy File Sharing WS v7.2 - UserId Buffer Overflow References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2149 Release Date: ============= 2018-10-01 Vulnerability Laboratory ID VL-ID: ==================================== 2149...
End of support for Office 2016 and Office 2019
None None...
Win32k Graphics Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete dat...
Easy File Sharing Web Server 6.9 Buffer Overflow Exploit
Easy File Sharing Web Server version 6.9 POST msg.ghp UserID remote buffer overflow SEH exploit with DEP bypass and ROP. !/usr/bin/python Exploit Title: Easy File Sharing Web Server 6.9 - 'POST' msg.ghp 'UserID' Remote Buffer Overflow SEHDEP Bypass + ROP Google Dork: intitle:"Login - powered by...
[SECURITY] Fedora 28 Update: python-pycryptodomex-3.6.6-1.fc28
PyCryptodome is a self-contained Python package of low-level cryptographic primitives. It's a fork of PyCrypto. It brings several enhancements with respect to the last official version of PyCrypto 2.6.1, for instance: Authenticated encryption modes GCM, CCM, EAX, SIV, OCB Accelerated AES on Intel...
Crashing Mobile Apps Capture Screens, Leak Private Data
Several mobile software developer kits SDKs can capture sensitive user data when a mobile app crashes, exposing private data to an outside third party. Researchers at Appthority singled out SDKs offered by AppSee and TestFairy in a report published Monday. They warned that mobile users whose apps...
Microsoft Windows - Advanced Local Procedure Call (ALPC) Local Privilege Escalation
Microsoft Windows - Advanced Local Procedure Call ALPC Local Privilege Escalation Note: PoC will now hijack the print spooler service - spoolsv.exe - as it required less code then hijacking printfilterpipelinesvc.exe, which was shown in the original video demo Description of the vulnerability The...