Microsoft Windows NtEnumerateKey Privilege Escalation
Posted by deepcore under exploit (No Respond)
Microsoft Windows suffers from a double dereference in NtEnumerateKey that leads to elevation of privilege.
Archive for September, 2018
[local] NICO-FTP 3.0.1.19 – Buffer Overflow (SEH)
Posted by deepcore under Security (No Respond)
[shellcode] Linux/x86 – Egghunter + sigaction-based Shellcode (27 bytes)
Posted by deepcore under Security (No Respond)
Apple iOS 11.x – Webkit Filter Backdrop DoS Vulnerability
Posted by deepcore under exploit (No Respond)
…
NUUO NVRMini2 3.8 Buffer Overflow
Posted by deepcore under exploit (No Respond)
NUUO NVRMini2 version 3.8 cgi_system buffer overflow exploit.
Ubisoft Uplay Desktop Client 63.0.5699.0 Remote Code Execution
Posted by deepcore under exploit (No Respond)
Ubisoft Uplay Desktop Client version 63.0.5699.0 suffers from a remote code execution vulnerability.
Moodle 3.x PHP Unserialize Remote Code Execution
Posted by deepcore under exploit (No Respond)
Moodle versions 3.5.2, 3.4.5, 3.3.8, and 3.1.14 suffer from a remote php unserialize code execution vulnerability.
CA Release Automation NiMi 6.5 Remote Command Execution
Posted by deepcore under exploit (No Respond)
CA Release Automation NiMi version 6.5 suffers from a remote command execution vulnerability.
Western Digital My Cloud Authentication Bypass
Posted by deepcore under exploit (No Respond)
It was discovered that the Western Digital My Cloud is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the My Cloud device. This vulnerability was successfully verified on a Western Digital My Cloud […]
[webapps] WordPress Plugin Wechat Broadcast 1.2.0 – Local File Inclusion
Posted by deepcore under Security (No Respond)