1137 matches found
Ajenti 2.1.31 - Remote Code Execution
Title: Ajenti 2.1.31 - Remote Code Execution Author: Jeremy Brown Date: 2019-10-13 Software Link: https://github.com/ajenti/ajenti CVE: N/A Tested on: Ubuntu Linux !/usr/bin/python ajentix.py Ajenti Remote Command Execution Exploit ------- Details ------- Ajenti is a web control panel written in...
Apple Swift CVE-2019-8790 Information Disclosure Vulnerability
Description Apple Swift is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Apple Swift 3.0 Apple Swift 3.0.1 Apple Swift 3.0.2 Apple Swift 3.1 Apple Swift 3.1.1 Apple Swift 4....
Samba CVE-2019-10197 Privilege Escalation Vulnerability
Description Samba is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. This issue has been fixed in Samba 4.9.13, 4.10.8 and 4.11.0rc3. Technologies Affected IBM Watson Studio Local 1.2.3 Redhat Enterprise Linux 7 Redhat Enterprise Linu...
Exim CVE-2019-15846 Arbitrary Code Execution Vulnerability
Description Exim is prone to an arbitrary code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with root privileges. Exim versions 4.8 through 4.92.1 are vulnerable. Technologies Affected Exim Exim 4.80 Exim Exim 4.80.1 Exim Exim 4.82 Exim Exim 4.82.1 Exim Ex...
curl/libcURL CVE-2019-5482 Heap Buffer Overflow Vulnerability
Description curl/libcURL is prone a heap-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. libcurl versions 7.19.4 through 7.65.3...
The vulnerability of the Pacemaker resource management software for operating systems based on Ubuntu, Fedora, and OpenSUSE Leap lies in its uncontrolled resource consumption, which allows a malicious actor to cause service interruptions.
The vulnerability of the Pacemaker resource management software for operating systems based on Ubuntu, Fedora, and OpenSUSE Leap involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service interruptions...
ManageEngine ServiceDesk Plus 9.3 - User Enumeration
Exploit Title: ManageEngine ServiceDesk Plus - 9.3 User enumeration vulnerability Date: 2019-03-29 Exploit Author: Operat0r Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/service-desk/download.html Version: 9.3 Tested on: Ubuntu Linux CVE :...
UBUNTU-CVE-2019-10232
Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlocktasks.php...
Microsoft Azure CVE-2019-0816 Security Bypass Vulnerability
Description Microsoft Azure is prone to a security bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions; this may aid in launching further attacks. Technologies Affected Ubuntu Ubuntu Linux 18.04 LTS Recommendations Block external access at the network...
Internet Bug Bounty: Ubuntu Linux privilege escalation (dirty_sock)
Hi team, This week, I have publicly disclosed the dirtysock local root exploit affecting multiple Linux Operating Systems. Very detailed information on the vulnerability can be found in my blog posting here. And the exploit code can be found in my GitHub repository here. The vulnerability exists ...
Care2x 2.7 (HIS) Hospital Information System SQL Injection
Exploit Title: Care2x 2.7 HIS Hospital Information system - Multiples SQL Injection Date: 01/17/2019 Software Links/Project: https://github.com/care2x/care2x | http://www.care2x.org/ Version: Care2x 2.7 Exploit Author: Carlos Avila Category: webapps Tested on: Windows 8.1 / Ubuntu Linux Contact:...
Linux - Nested User Namespace idmap Limit Local Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Nested User Namespace idmap Limit Local Privilege Escalation', 'Description' = %q This module exploits a vulnerability in Linux kernels...
Linux Nested User Namespace idmap Limit Local Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Nested User Namespace idmap Limit Local Privilege Escalation', 'Description' = %q This module exploits a vulnerability in Linux kernels...
Network Manager VPNC Username Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Network Manager VPNC Username Privilege Escalation', 'Description' = %q This module exploits an injection vulnerability in the Network Manager VP...
Network Manager VPNC 1.2.6 - 'Username' Local Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Network Manager VPNC Username Privilege Escalation', 'Description' = %q This module exploits an injection vulnerability in the Network Manager VP...
Network Manager VPNC Username Privilege Escalation
This module exploits an injection vulnerability in the Network Manager VPNC plugin to gain root privileges. This module uses a new line injection vulnerability in the configured username for a VPN network connection to inject a Password helper configuration directive into the connection...
glibc 'realpath()' Privilege Escalation
This module attempts to gain root privileges on Linux systems by abusing a vulnerability in GNU C Library glibc version 2.26 and prior. This module uses halfdog's RationalLove exploit to exploit a buffer underflow in glibc realpath and create a SUID root shell. The exploit has offsets for glibc...
Emby MediaServer 3.2.5 Directory Traversal File Disclosure Vulnerability
Summary Emby formerly Media Browser is a media server designed to organize, play, and stream audio and video to a variety of devices. Emby is open-source, and uses a client-server model. Two comparable media servers are Plex and Windows Media Center. Description The vulnerability was confirmed on...
Immunity Canvas: JBOSS6_JMXINVOKERSERVLET_DESERIALIZE
Name| jboss6jmxinvokerservletdeserialize ---|--- CVE| CVE-2015-7501 Exploit Pack| CANVAS Description| jboss6jmxinvokerservletdeserialize Notes| CVE Name: CVE-2015-7501 VENDOR: Red Hat NOTES: IMPORTANT NOTE: Any instance of this application running Apache Commons Collections version prior to 3.0...
Immunity Canvas: WEBLOGIC_T3_DESERIALIZATION
Name| weblogict3deserialization ---|--- CVE| CVE-2015-4852 Exploit Pack| CANVAS Description| weblogict3deserialization Notes| CVE Name: CVE-2015-4852 VENDOR: Oracle NOTES: IMPORTANT NOTE: Any instance of this application running Apache Commons Collections version prior to 3.0 WILL NOT WORK...