VMware vCenter vScalation Privilege Escalation Exploit

This Metasploit module exploits a privilege escalation in vSphere/vCenter due to improper permissions on the /usr/lib/vmware-vmon/java-wrapper-vmon file. It is possible for anyone in the cis group to write to the file, which will execute as root on vmware-vmon service restart or host reboot. This...

VMSA-2022-0030:VMware ESXi and vCenter Server updates address multiple security vulnerabilities

Advisory ID: VMSA-2022-0030 CVSSv3 Range: 4.2-7.5 Issue Date:2022-12-08 Updated On: 2022-12-08 Initial Advisory CVEs: CVE-2022-31696, CVE-2022-31697, CVE-2022-31698, CVE-2022-31699 Synopsis: VMware ESXi and vCenter Server updates address multiple security vulnerabilities CVE-2022-31696,...

VMware vCenter vScalation Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware vCenter vScalation Priv Esc', 'Description' = %q This module exploits a privilege escalation in vSphere/vCenter due to improper permission...

VMware Tools 10.x / 11.x / 12.x < 12.1.5 DoS (VMSA-2022-0029)

The version of VMware Tools installed on the remote Windows host is affected by a denial of service vulnerability in the VM3DMP driver. An authenticated, local attacker can exploit this to trigger a PANIC in the VM3DMP driver leading to a denial-of-service condition in the Windows guest OS. Note...

VMware Tools for Windows Denial of Service Vulnerability

VMware Tools for Windows 10.0.0 and later, but prior to version 12.1.5, contain a denial of service vulnerability. A denial of service vulnerability exists in the VM3DMP driver, which is caused by improper input validation in the VM3DMP driver and can be exploited by an attacker with local user...

VMware Tools for Windows security vulnerabilities

VMware Tools for Windows is a suite of Windows-based enhancements for VMWare virtual machines from VMware, Inc. It is a driver provided by VMware to enhance the performance of virtual graphics cards and hard disks, as well as to synchronize the clocks of the virtual machine with the host computer...

PT-2022-10049

Name of the Vulnerable Software and Affected Versions VMware Tools for Windows versions prior to 12.1.5 Description The issue is related to a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest OS can trigger a PANIC in the VM3DM...

PT-2022-6136

Name of the Vulnerable Software and Affected Versions VMware Tools for Windows versions 10.x.y through 12.1.4 VMware Tools for Windows versions 11.x.y Description The issue is related to insufficient input validation in the VM3DMP driver of VMware Tools for Windows, which can lead to a...

WordPress plugin The 10Web Photo Gallery has a security vulnerability

VMware Tools for Windows 10.0.0 and later, but prior to version 12.1.5, contain a denial of service vulnerability. A denial of service vulnerability exists in the VM3DMP driver, which is caused by improper input validation in the VM3DMP driver and can be exploited by an attacker with local user...

Exploit for Code Injection in Vmware Spring_Framework

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with...

VMware Cloud Foundation XML Link Information Disclosure

The vulnerability of VMware Cloud Foundation’s virtualization platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose sensitive information using specially created XML code...

VMSA-2022-0029:VMware Tools for Windows update addresses a denial-of-service vulnerability

Advisory ID: VMSA-2022-0029 CVSSv3 Range: 3.3 Issue Date:2022-11-29 Updated On: 2022-11-29 Initial Advisory CVEs: CVE-2022-31693 Synopsis: VMware Tools for Windows update addresses a denial-of-service vulnerability CVE-2022-31693 RSS Feed Download PDF Download Text File Share this page on social...

Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester

Summary From mid-June through mid-July 2022, CISA conducted an incident response engagement at a Federal Civilian Executive Branch FCEB organization where CISA observed suspected advanced persistent threat APT activity. In the course of incident response activities, CISA determined that cyber...

VMware Workspace ONE Assist Session Management Unauthorized Access

The vulnerability of the remote access tool for VMware Workspace ONE Assist is related to improper session management. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the application...

Design/Logic Flaw

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled...

CVE-2009-1142: Improper Link Resolution Before File Access

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled...

PT-2022-7720

Name of the Vulnerable Software and Affected Versions open-vm-tools version 2009.03.18-154848 Description An issue was discovered in open-vm-tools where local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory functi...

VMware Open-Vm-Tools post-link vulnerability

VMware open-vm-tools is a set of services and modules from VMware, Inc. It includes kernel modules to enhance the performance of virtual machines running Linux or other VMware-supported Unix-like guest operating systems. A security vulnerability exists in VMware open-vm-tools version...

Oracle Linux 9 : ignition (ELSA-2022-8126)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-8126 advisory. 2.14.0-1 - New release - Add ignition-apply symlink - Add ignition-rmcfg symlink and ignition-delete-config.service 2.13.0-2 - Rename -validate-nonlinux...

ignition security, bug fix, and enhancement update

2.14.0-1 - New release - Add ignition-apply symlink - Add ignition-rmcfg symlink and ignition-delete-config.service 2.13.0-2 - Rename -validate-nonlinux subpackage to -validate-redistributable - Add static Linux binaries to -redistributable - Fix macro invocation in comment - Avoid kernel lockdow...