Subscribe via feed.
Archive for February, 2023

Apple Splats Zero-Day Bug, Other Gremlins In macOS, iOS

Posted by deepcore under exploit (No Respond)

Apple Security Advisory 2023-02-13-1

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2023-02-13-1 – iOS 16.3.1 and iPadOS 16.3.1 addresses code execution and use-after-free vulnerabilities.

Tags: , ,

Apple Security Advisory 2023-02-13-2

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2023-02-13-2 – macOS Ventura 13.2.1 addresses code execution and use-after-free vulnerabilities.

Tags: , ,

Apple Security Advisory 2023-02-13-3

Posted by deepcore under Apple (No Respond)

Apple Security Advisory 2023-02-13-3 – Safari 16.3.1 addresses a code execution vulnerability.

Tags: , ,

B&R Systems Diagnostics Manager Cross Site Scripting

Posted by deepcore under exploit (No Respond)

B&R Systems Diagnostics Manager versions above or equal to 3.00 and below or equal to C4.93 suffer from a cross site scripting vulnerability.

XWorm Trojan 2.1 NULL Pointer Dereference

Posted by deepcore under exploit (No Respond)

XWorm Trojan version 2.1 suffers from a denial of service condition due to a null pointer vulnerability.

Cisco RV Series Authentication Bypass / Command Injection

Posted by deepcore under exploit (No Respond)

This Metasploit module exploits two vulnerabilities, a session ID directory traversal authentication bypass (CVE-2022-20705) and a command injection vulnerability (CVE-2022-20707), on Cisco RV160, RV260, RV340, and RV345 Small Business Routers, allowing attackers to execute arbitrary commands with www-data user privileges. This access can then be used to pivot to other parts of the network. This […]

Cisco RV Series Authentication Bypass / Command Injection

Posted by deepcore under exploit (No Respond)

This Metasploit module exploits two vulnerabilities, a session ID directory traversal authentication bypass (CVE-2022-20705) and a command injection vulnerability (CVE-2022-20707), on Cisco RV160, RV260, RV340, and RV345 Small Business Routers, allowing attackers to execute arbitrary commands with www-data user privileges. This access can then be used to pivot to other parts of the network. This […]

Global Infotech CMS 1.0 SQL Injection

Posted by deepcore under exploit (No Respond)

Global Infotech CMS version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Windows Kernel Key Replication Issues

Posted by deepcore under exploit (No Respond)

The Microsoft Windows kernel suffers from multiple security issues in the key replication feature of registry virtualization.