exploit – Page 1748 –

>> Windows Task Scheduler DeleteExpiredTaskAfter File Deletion Privilege Escalation

USER: deepcore // 2015-09-20 // 0 CMT

The Task Scheduler can be made to delete a task after it’s trigger has expired. No check is made to ensure the task file is not a junction which allows…

[EXPLOIT]

>> WordPress Vertical Image Slider 1.0 CSRF / XSS

USER: deepcore // 2015-09-20 // 0 CMT

WordPress Vertical Image Slider plugin version 1.0 suffers from cross site request forgery and cross site scripting vulnerabilities.

[EXPLOIT]

>> VBox Satellite Express Arbitrary Write Privilege Escalation

USER: deepcore // 2015-09-20 // 0 CMT

A vulnerability within the ndvbs module allows an attacker to inject memory they control into an arbitrary location they define. This vulnerability can be used to overwrite function pointers in…

[EXPLOIT]

>> Konica Minolta FTP Utility 1.00 Post Auth CWD Command SEH Overflow

USER: deepcore // 2015-09-20 // 0 CMT

This Metasploit module exploits an SEH overflow in Konica Minolta FTP Server 1.00. Konica Minolta FTP fails to check input size when parsing ‘CWD’ commands, which leads to an SEH…