241 matches found
How to Change Credentials for a Shared Folder in a File to Tape Job
Purpose This article documents how to change credentials used to connect to a UNC path added to a File Backup to Tape job. Solution To add an SMB share to a File Backup to Tape job, the SMB share must be added in the Inventory view under File Shares SMB Shares section. To change which credentials...
Windows Information Disclosure Vulnerability
An information disclosure vulnerability exists when Windows fails to properly validate NT LAN Manager NTLM Single Sign-On SSO requests during Microsoft Account MSA login sessions. An attacker who successfully exploited the vulnerability could attempt to brute force a user’s NTLM password hash. To...
BadTunnel: Cross-Segment hijacking the broadcast Protocol-vulnerability warning-the black bar safety net
! 0x00 introduction This paper proposes a new attack model, can cross network segment hijacking the TCP/IP broadcast Protocol, we named it“BadTunnel” in. Using this method, you can achieve cross-subnet NetBIOS Name Service Spoofing attacks. Both the attacker and the user are in the same network...
MS15-100 Microsoft Windows Media Center MCL Vulnerability
No description provided by source. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS15-100 Microsoft Windows Media Center MCL Vulnerability", 'Description' = %q This module exploi...
Microsoft Windows Media Center MCL MS15-100 Vulnerability
This Metasploit module exploits a vulnerability in Windows Media Center. By supplying an UNC path in the .mcl file, a remote file will be automatically downloaded, which can result in arbitrary code execution. This module requires Metasploit: http://metasploit.com/download Current source:...
MS15-100 Microsoft Windows Media Center MCL Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "MS15-100 Microsoft Windows Media Center MCL Vulnerability", 'Description' = %q This module exploits a vulnerability in Windows Media...
MS15-100 Microsoft Windows Media Center MCL Vulnerability
This module exploits a vulnerability in Windows Media Center. By supplying an UNC path in the .mcl file, a remote file will be automatically downloaded, which can result in arbitrary code execution. This module requires Metasploit: https://metasploit.com/download Current source:...
Microsoft Windows Shell LNK Code Execution
This module exploits a vulnerability in the MS10-046 patch to abuse again the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This module creates the required files to exploit the vulnerability. They must be uploaded to an UNC path accessible by...
Nvidia Mental Ray Satellite Service Arbitrary DLL Injection Vulnerability
The Nvidia Mental Ray Satellite Service listens for control commands on port 7414. When it receives the command to load a DLL via an UNC path it will try to connect back to the host on port 7514. If a TCP connection is successful it will then attempt to load the DLL. This Metasploit module has be...
Nvidia Mental Ray Satellite Service Arbitrary DLL Injection
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Nvidia Mental Ray Satellite Service Arbitrary DLL Injection', 'Description' = %q The Nvidia Mental Ray Satellite Service listens for...
SolarWinds Server and Application Monitor Buffer Overflow Vulnerability (CNVD-2015-01241)
SolarWinds Server and Application Monitor is a server and application monitor from SolarWinds USA. The monitor provides monitoring, alerts, reports and more for server hardware and applications. A security vulnerability in the SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl...
CVE-2015-1501
The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via a UNC path to a crafted binary...
Server side request forgery (ssrf)
The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via a UNC path to a crafted binary...
CVE-2015-1501
The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor SAM allow remote attackers to execute arbitrary code via a UNC path to a crafted binary...
CVE-2015-1501
The CVE-2015-1501 flaw affects SolarWinds Server and Application Monitor (SAM) in the TSUnicodeGraphEditorControl: factory.loadExtensionFactory accepts a UNC path to a crafted binary, enabling remote code execution. Multiple sources (e.g., ZDI-15-043, CPAI-2015-0429, CNVD-2015-01241) describe rem...
SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl factory.loadExtensionFactory Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Server and Application Monitor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...
Authentication Capture: SMB
This module provides a SMB service that can be used to capture the challenge-response password NTLMv1 & NTLMv2 hashes used with SMB1, SMB2, or SMB3 client systems. Responses sent by this service by default use a random 8 byte challenge string. A specific value such as 1122334455667788 can be set...
Winamp <= 5.12 - (.pls) Remote Buffer Overflow Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
SAP NetWeaver HostControl Command Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
PPLive <= 1.9.21 (/LoadModule) URI Handlers Argument Injection Vuln
No description provided by source. -------------------------------------------------------------------------------- PPLive = 1.9.21 uri handlers /LoadModule remote argument injection by Nine:Situations:Group::strawdog -------------------------------------------------------------------------------...