12 - 2018 - :: Deepquest ::

[EXPLOIT]

>> PDF Explorer 1.5.66.2 SEH Buffer Overflow

USER: deepcore // 2018-12-20 // 0 CMT

PDF Explorer version 1.5.66.2 SEH buffer overflow exploit.

[EXPLOIT]

>> LanSpy 2.0.1.159 Local Buffer Overflow

USER: deepcore // 2018-12-20 // 0 CMT

LanSpy version 2.0.1.159 local buffer overflow exploit.

[EXPLOIT]

>> Rukovoditel Project Management CRM 2.3.1 Remote Code Execution

USER: deepcore // 2018-12-20 // 0 CMT

Rukovoditel Project Management CRM version 2.3.1 suffers from a remote code execution vulnerability.

[EXPLOIT]

>> VBScript VbsErase Reference Leak

USER: deepcore // 2018-12-20 // 0 CMT

There is an reference leak in Microsoft VBScript that can be turned into an use-after-free given sufficient time. The vulnerability has been confirmed in Internet Explorer on various Windows versions…

[EXPLOIT]

>> VBScript MSXML Policy Bypass

USER: deepcore // 2018-12-20 // 0 CMT

Starting from Windows 10 Fall Creators Update, VBScript execution in IE 11 should be disabled for websites in the Internet Zone and the Restricted Sites Zone by default. However, the…

[EXPLOIT]

>> Erlang Port Mapper Daemon Cookie Remote Code Execution

USER: deepcore // 2018-12-20 // 0 CMT

The erlang port mapper daemon is used to coordinate distributed erlang instances. Should an attacker get the authentication cookie, remote code execution is trivial. Usually, this cookie is named “.erlang.cookie”…