vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reliable Datagram Sockets RDS rdspagecopyuser Privilege Escalation', 'Description' = %q This module exploits a vulnerability in the rdspagecopyus...

CVE-2019-18253

An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior outside the intended directory...

CVE-2019-1322

creationtimestamp| type| source ---|---|--- 2019-11-14 15:02:06+00:00| seen| https://t.me/canyoupwnme/6135 2019-11-15 19:29:39+00:00| published-proof-of-concept| https://t.me/canyoupwnme/6143 2019-11-16 12:53:34+00:00| published-proof-of-concept| https://t.me/DC8044Info/473 2019-12-18...

SQL Injection Vulnerability in JeePlus Rapid Development Platform

JeePlus rapid development platform is an integrated code generator java rapid development framework . A SQL injection vulnerability exists in JeePlus Rapid Development Platform. An attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2019-11660

creationtimestamp| type| source ---|---|--- 2019-11-01 08:08:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/omniresolvesuidprivesc.rb 2019-11-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47580 2025-02-06 03:13:43+00:00|...

MS-ISAC Releases EOS Software Report List

The Multi-State Information Sharing and Analysis Center MS-ISAC has released an end-of-support EOS software report list. Software that has reached its EOS date no longer receives security updates and patches from the vendor and is, therefore, susceptible to exploitation from security...

CertUtil Qualms: They Came to Drop FOMBs

This blog post covers an interesting intrusion attempt that Mandiant Managed Defense thwarted involving the rapid weaponization of a recently disclosed vulnerability combined with the creative use of WMI compiled “.bmf” files and CertUtil for obfuscated execution. This intrusion attempt highlight...

CVE-2019-1346

creationtimestamp| type| source ---|---|--- 2019-10-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47488...

CVE-2008-5916

gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a craft...

ACTi ACM-5611 Video Camera Remote Command Execution

!/usr/bin/perl ACTi ACM-5611 Video Camera Remote Command Execution Exploit Copyright 2019 c Todor Donev Firmware Version = A1D-220-V3.08.08-AC Production ID = ACM5611-08G-X-00485 Factory Default Type = NTSC, Composite, Two Ways Audio 0x71 Company Name = ACTi Corporation WEB Site = www.acti.com...

Google Chrome Password Leakage Vulnerability

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a password disclosure vulnerability that can be exploited by an attacker to cause a password disclosure...

Eclipse Mosquitto Resource Management Error Vulnerability

Eclipse Mosquitto is the Eclipse Foundation's set of open source messaging agent software . A resource management error vulnerability exists in Eclipse Mosquitto versions 1.6.0 through 1.6.4. The vulnerability arises from a networked system or product that mismanages system resources e.g., memory...

CVE-2019-11665

Data exposure in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow sensitive data exposure...

CVE-2019-11660

Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges...

CVE-2019-10988

In Philips HDI 4000 Ultrasound Systems, all versions running on old, unsupported operating systems such as Windows 2000, the HDI 4000 Ultrasound System is built on an old operating system that is no longer supported. Thus, any unmitigated vulnerability in the old operating system could be exploit...

The vulnerability of the Bluetooth BR/EDR encryption key negotiation protocol, which stems from the use of cryptographic algorithms with defects, allows a perpetrator to carry out a “man-in-the-middle” attack, interfering with the encryption setup process for BR/EDR connections and reducing the length of the encryption key used.

The vulnerability of the Bluetooth BR/EDR encryption key negotiation protocol lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a malicious actor, operating remotely, to carry out a “man-in-the-middle” attack, interfere with the...

Defense Takeaways from Three Adversary Playbooks

In these days of advanced threats, the perimeter defense strategy – though still useful and necessary – is incomplete. IT security teams need as much information about existing threats as possible, so they know what to look for and how to position proactive countermeasures. Creating and using...

CVE-2018-18056

An issue was discovered in the Texas Instruments TI TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory XOM implementation prevents code read-outs on protected memory by generating bus faults. However, single-stepping and using breakpoints is allowed in XOM-protected flash...

ManageEngine opManager 12.3.150 Remote Code Execution

!/usr/bin/env python3 Exploit Title: ManageEngine opManager Authenticated Code Execution Google Dork: N/A Date: 08/13/2019 Exploit Author: @kindredsec Vendor Homepage: https://www.manageengine.com/ Software Link: https://www.manageengine.com/network-monitoring/download.html Version: 12.3.150 Test...

MilkyTracker Buffer Overflow Vulnerability

MilkyTracker is an application that plays MOD format files and arranges them. MilkyTracker suffers from a buffer overflow vulnerability. An attacker could exploit this vulnerability to cause a buffer overflow or heap overflow, among other things...