:: Deepquest ::

Linux/x86 – Bind TCP Shell + fork() Shellcode (113 bytes)

HWiNFO version 5.82-3410 suffers from a denial of service vulnerability.

This Metasploit module exploits a code injection vulnerability within an authenticated file upload feature in PlaySMS version 1.4. This issue is caused by improper file name handling in sendfromfile.php file. Authenticated Users can upload a file and rename the file with a malicious payload. This Metasploit module was tested against PlaySMS 1.4 on VulnHub’s Dina […]

This Metasploit module exploits an authenticated file upload remote code execution vulnerability in PlaySMS version 1.4. This issue is caused by improper file contents handling in import.php (aka the Phonebook import feature). Authenticated Users can upload a CSV file containing a malicious payload via vectors involving the User-Agent HTTP header and PHP code in the […]

The WordPress User Role Editor plugin prior to v4.25, is lacking an authorization check within its update user profile functionality (“update” function, contained within the “class-user-other-roles.php” module). Instead of verifying whether the current user has the right to edit other users’ profiles (“edit_users” WP capability), the vulnerable function verifies whether the current user has the […]

DeviceLock Plug and Play Auditor version 5.72 suffers from a unicode buffer overflow vulnerability.

GNU Wget versions 1.7 through 1.19.4 suffer from a cookie injection vulnerability.

This Metasploit module exploits a chain of vulnerabilities in Palo Alto Networks products running PAN-OS versions prior to 6.1.19, 7.0.19, 7.1.14, and 8.0.6. This chain starts by using an authentication bypass flaw to to exploit an XML injection issue, which is then abused to create an arbitrary directory, and finally gains root code execution by […]

Apple Security Advisory 2018-05-04-1 – Security Update 2018-001 Swift 4.1.1 for Ubuntu 14.04 is now available and addresses code execution issues.

PlaySMS 1.4 – ‘sendfromfile.php?Filename’ Authenticated ‘Code Execution (Metasploit)