CVE-2017-9769: Undefined Security Weakness

A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process...

Razer Synapse 2.20.15.1104 - rzpnk.sys ZwOpenProcess (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/local/windowskernel' require 'rex' require 'metasm' class MetasploitModule 'Razer Synapse rzpnk.sys ZwOpenProcess', 'Description' = %q A...

Razer Synapse rzpnk.sys ZwOpenProcess

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/local/windowskernel' require 'rex' require 'metasm' class MetasploitModule 'Razer Synapse rzpnk.sys ZwOpenProcess', 'Description' = %q A...

Razer Synapse rzpnk.sys ZwOpenProcess Exploit

A vulnerability exists in the latest version of Razer Synapse v2.20.15.1104 as of the day of disclosure which can be leveraged locally by a malicious application to elevate its privileges to those of NTAUTHORITY\SYSTEM. This module requires Metasploit: http//metasploit.com/download Current source...

PT-2017-2839

Name of the Vulnerable Software and Affected Versions Razer Synapse version 2.20.15.1104 Description The issue is related to a specially crafted IOCTL that can be issued to the rzpnk.sys driver, allowing a handle to be opened to an arbitrary process through ZwOpenProcess. This is due to...

Razer Synapse rzpnk.sys ZwOpenProcess

A vulnerability exists in the latest version of Razer Synapse v2.20.15.1104 as of the day of disclosure which can be leveraged locally by a malicious application to elevate its privileges to those of NTAUTHORITY\SYSTEM. The vulnerability lies in a specific IOCTL handler in the rzpnk.sys driver th...

Windows Gather Razer Synapse Password Extraction

This module will enumerate passwords stored by the Razer Synapse client. The encryption key and iv is publicly known. This module will not only extract encrypted password but will also decrypt password using public key. Affects versions earlier than 1.7.15. This module requires Metasploit:...

Synapse Web Solution SQL-i Vulnerability

Exploit for php platform in category web applications +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+= +=+=+= /\ | | | | +=+=+= +=+=+= / \ | || | / / | \ | |\ \ / \ / / +=+=+= +=+=+= / /\ | || | // | | | | / | | \ / / / +=+=+= +=+=+= / \ | | | | | | ...

Synapse Web Solution SQL Injection

========================================================================= Synapse Web Solution SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+= +=+=+= /\ | | ...

Visual Synapse HTTP Server Directory Traversal Vulnerability

This host is running Visual Synapse HTTP Server and is prone to directory traversal vulnerability. OpenVAS Vulnerability Test $Id: gbvshttpserverdirtraversalvuln.nasl 5388 2017-02-21 15:13:30Z teissa $ Visual Synapse HTTP Server Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...

Visual Synapse HTTP Server Directory Traversal Vulnerability (2010) - Active Check

Visual Synapse HTTP Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Visual Synapse HTTP Server directory traversal

Directory traversal with backslash...

Syhunt Advisory: Visual Synapse HTTP Server Directory Traversal Vulnerability

Syhunt Advisory: Visual Synapse HTTP Server Directory Traversal Vulnerability Advisory-ID: 201010071 Discovery Date: 09.07.2010 Release Date: 10.07.2010 Affected Applications: Visual Synapse HTTP Server 1.0 RC3, 1.0 RC2, 1.0 RC1, 0.60 and previous releases; And any applications using the Visual...

CVE-2010-3743

Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read arbitrary files via a .. dot dot in the URI...

Directory traversal

Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read arbitrary files via a .. dot dot in the URI...

CVE-2010-3743

Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read arbitrary files via a .. dot dot in the URI...

CVE-2010-3743

Summary: CVE-2010-3743 affects Visual Synapse HTTP Server. The vulnerability is a directory traversal flaw that lets remote attackers read arbitrary files by crafting a URI containing dot-dot sequences. Affected products/versions (as stated): Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0....

Visual Synapse HTTP Server v1.0 RC3 Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits ===================================================================== Visual Synapse HTTP Server v1.0 RC3 Directory Traversal Vulnerability ===================================================================== Vendor URL:...

CVE-2010-3743: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read arbitrary files via a .. dot dot in the URI...

PT-2010-5037

Name of the Vulnerable Software and Affected Versions Visual Synapse HTTP Server versions 0.60 and earlier, 1.0 RC1 through RC3 Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. dot dot in the URI. This could potentially expose sensitive...