12 - 2020 - :: Deepquest ::

[EXPLOIT]

>> Task Management System 1.0 Cross Site Scripting

USER: deepcore // 2020-12-10 // 0 CMT

Task Management System version 1.0 suffers from a persistent cross site scripting vulnerability.

[EXPLOIT]

>> Tibco ObfuscationEngine 5.11 Fixed Key Password Decryption

USER: deepcore // 2020-12-10 // 0 CMT

Tibco ObfuscationEngine version 5.11 uses a fixed key for decryption operations, making it pointless.

[EXPLOIT]

>> Microsoft Windows Cloud Filter Arbitrary File Creation / Privilege Escalation

USER: deepcore // 2020-12-10 // 0 CMT

The Microsoft Windows Cloud Filter driver can be abused to create arbitrary files and directories leading to elevation of privilege.

[EXPLOIT]

>> Microsoft Windows Cloud Filter HsmpAccessCheck Bypass / Privilege Escalation

USER: deepcore // 2020-12-10 // 0 CMT

The Microsoft Windows Cloud Filter access check does not take into account restrictions such as Mandatory Labels allowing a user to bypass security checks.

[EXPLOIT]

>> Microsoft Windows Cloud Filter HsmOsBlockPlaceholderAccess Registry Key Creation / Privilege Escalation

USER: deepcore // 2020-12-10 // 0 CMT

The Microsoft Windows Cloud Filter HsmOsBlockPlaceholderAccess function allows a user to create arbitrary registry keys in the .DEFAULT users hive leading to elevation of privilege.

[EXPLOIT]

>> Microsoft Windows WOF FSCTL_SET_REPARSE_POINT_EX Cached Signing Level Bypass

USER: deepcore // 2020-12-10 // 0 CMT

The Microsoft Windows WOF filter driver does not correctly handle the reparse point setting which allows for an arbitrary file to be cached signed leading to a bypass of UMCI.