Plantronics Hub < 3.25.1 Privilege Escalation

The version of Plantronics Hub installed on the remote Windows host is prior to 3.25.1. It is, therefore, affected by a privilege escalation vulnerability in its updater system. Due to a race condition, a local attacker can set any permissions on arbitrary files on an affected device. This can be...

Google Chrome < 120.0.6099.130 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 120.0.6099.130. It is, therefore, affected by a vulnerability as referenced in the 202312stable-channel-update-for-desktop20 advisory. - Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a...

Mozilla Thunderbird < 115.6

The version of Thunderbird installed on the remote Windows host is prior to 115.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-55 advisory. - Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed...

Metasploit Weekly Wrap-Up: Dec. 15, 2023

Continuing the 12th Labor of Metasploit Metasploit continues its Herculean task of increasing our toolset to tame Kerberos by adding support for ASREP Roasting, which allows retrieving the password hashes of users who have Do not require Kerberos preauthentication set on the domain controller. Th...

Adobe Prelude < 22.6.1 Memory leak (APSB23-67)

The version of Adobe Prelude installed on the remote Windows host is prior to 22.6.1. It is, therefore, affected by a vulnerability as referenced in the APSB23-67 advisory. - Adobe Prelude versions 22.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead t...

Google Chrome < 120.0.6099.110 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 120.0.6099.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 202312stable-channel-update-for-desktop12 advisory. - Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a...

Adobe Illustrator < 27.9.1 / 28.0 < 28.1 Multiple Arbitrary code execution (APSB23-68)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.1, 28.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-68 advisory. - Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by a Use After Free...

Adobe Dimension < 3.4.11 Multiple Memory leak (APSB23-71)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.11. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-71 advisory. - Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead...

Qlik Sense Enterprise HTTP Tunneling RCE

The version of Qlik Sense Enterprise installed on the remote Windows host is prior to November 2021 Patch 17, February 2022 prior to Patch 15, May 2022 prior to Patch 16, August 2022 prior to Patch 14, November 2022 prior to Patch 12, February 2023 prior to Patch 10, May 2023 prior to Patch 6 or...

CVE-2023-49694

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM...

CVE-2023-49694 NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM...

Mozilla Firefox ESR < 115.5.0

The version of Firefox ESR installed on the remote Windows host is prior to 115.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-50 advisory. - Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed...

Mozilla Firefox < 120.0

The version of Firefox installed on the remote Windows host is prior to 120.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-49 advisory. - Memory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory corruption and we presume that...

Mozilla Firefox < 115.5

The version of Firefox installed on the remote Windows host is prior to 115.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-50 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds read and leak...

Mozilla Thunderbird < 115.5.0

The version of Thunderbird installed on the remote Windows host is prior to 115.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-52 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds read and...

Security Update for Microsoft ASP.NET Core (November 2023) (CVE-2023-36038)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a denial of service as referenced in the vendor advisory. - ASP.NET Core Denial of Service Vulnerability CVE-2023-36038 Note that Nessus has not tested for these issues but has...

Wireshark 4.0.x < 4.0.11 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.0.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.11 advisory. - The SSH dissector could crash. It may be possible to make Wireshark crash or consume excessive CPU resources b...

Adobe Audition < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-64)

The version of Adobe Audition installed on the remote Windows host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-64 advisory. - Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an Access of Uninitialize...

Adobe Premiere Pro < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-65)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-65 advisory. - Adobe Premiere Pro version 24.0 and earlier and 23.6 and earlier are affected by an out-of-bounds re...

Microsoft Edge (Chromium) < 118.0.2088.102 / 119.0.2151.58 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.102 / 119.0.2151.58. It is, therefore, affected by multiple vulnerabilities as referenced in the November 9, 2023 advisory. - Microsoft Edge Chromium-based Remote Code Execution Vulnerability CVE-2023-36014 ...