Showing 1 - 7 of 7

Files from Leandro Barragan

First Active	2017-05-24
Last Active	2018-06-26

Quest KACE Systems Management Command Injection: Posted Jun 26, 2018; Authored by Brendan Coles, Leandro Barragan, Guido Leo | Site metasploit.com; This Metasploit module exploits a command injection vulnerability in Quest KACE Systems Management Appliance version 8.0.318 (and possibly prior). The download_agent_installer.php file allows unauthenticated users to execute arbitrary commands as the web server user www. A valid Organization ID is required. The default value is 1. A valid Windows agent version number must also be provided. If file sharing is enabled, the agent versions are available within the \\kace.local\client\agent_provisioning\windows_platform Samba share. Additionally, various agent versions are listed on the KACE website. This Metasploit module has been tested successfully on Quest KACE Systems Management Appliance K1000 version 8.0 (Build 8.0.318).; tags | exploit, web, arbitrary, local, php; systems | windows; advisories | CVE-2018-11138; SHA-256 | 0dbef74980c65246fdf8019f7b0a27a24a0c3431c8e7e457609a060b5a8fdf8d; Download | Favorite | View

Quest KACE System Management Appliance 8.0 (Build 8.0.318) XSS / Traversal / Code Execution / SQL Injection: Posted May 31, 2018; Authored by Core Security Technologies, Leandro Barragan, Guido Leo | Site coresecurity.com; Quest KACE System Management Appliance version 8.0 (Build 8.0.318) suffers from code execution, cross site scripting, path traversal, remote SQL injection, and various other vulnerabilities.; tags | exploit, remote, vulnerability, code execution, xss, sql injection; advisories | CVE-2018-11132, CVE-2018-11133, CVE-2018-11134, CVE-2018-11135, CVE-2018-11136, CVE-2018-11137, CVE-2018-11138, CVE-2018-11139, CVE-2018-11140, CVE-2018-11141, CVE-2018-11142; SHA-256 | fd18c79b0364edc307ae0073788f224ea5fd016ba9223e6018267eb9911d3f41; Download | Favorite | View

Trend Micro Email Encryption Gateway XSS / Code Execution: Posted Feb 21, 2018; Authored by Core Security Technologies, Maximiliano Vidal, Leandro Barragan | Site coresecurity.com; Trend Micro Email Encryption Gateway suffers from cleartext transmission of sensitive information, missing authentication, cross site request forgery, cross site scripting, and various other vulnerabilities.; tags | exploit, vulnerability, xss, csrf; advisories | CVE-2018-6219, CVE-2018-6220, CVE-2018-6221, CVE-2018-6222, CVE-2018-6223, CVE-2018-6224, CVE-2018-6225, CVE-2018-6226, CVE-2018-6227, CVE-2018-6228, CVE-2018-6229, CVE-2018-6230; SHA-256 | 5c0882e4ec54030fb98c7a6e8448db8a4938d363d703cac4986200aed680c428; Download | Favorite | View

Kaspersky Secure Mail Gateway 1.1.0.379 CSRF / Code Execution: Posted Feb 6, 2018; Authored by Core Security Technologies, Leandro Barragan | Site coresecurity.com; Kaspersky Secure Mail Gateway version 1.1.0.379 suffers from code execution and cross site request forgery vulnerabilities.; tags | exploit, vulnerability, code execution, csrf; SHA-256 | 1b0dff497ed1d448eeffc8af638a0c8fcc1b7926b370e7184cbf5c1126f956f6; Download | Favorite | View

Trend Micro Smart Protection Server 3.2 XSS / Access Control / Disclosure: Posted Dec 22, 2017; Authored by Core Security Technologies, Maximiliano Vidal, Leandro Barragan | Site coresecurity.com; Trend Micro Smart Protection Server version 3.2 suffers from access control bypass, cross site scripting, information disclosure, and various other vulnerabilities.; tags | exploit, vulnerability, xss, info disclosure; advisories | CVE-2017-11398, CVE-2017-14094, CVE-2017-14095, CVE-2017-14096, CVE-2017-14097; SHA-256 | 149823a62c0b55b825b4c969054429d6a9537f6a010bb018f45e836ab0ce649f; Download | Favorite | View

Kaspersky Anti-Virus File Server 8.0.3.297 XSS / CSRF / Code Execution: Posted Jun 29, 2017; Authored by Core Security Technologies, Maximiliano Vidal, Leandro Barragan | Site coresecurity.com; Kaspersky Anti-Virus for Linux File Server version 8.0.3.297 suffers from remote code execution, cross site request forgery, cross site scripting, security bypass, information disclosure, and path traversal vulnerabilities.; tags | exploit, remote, vulnerability, code execution, virus, xss, info disclosure, csrf; systems | linux; advisories | CVE-2017-9810, CVE-2017-9811, CVE-2017-9812, CVE-2017-9813; SHA-256 | 1011f2188afe2cfa015134b365c225eb892ed298b59a2beb4cc63a8e09cdc1b0; Download | Favorite | View

Trend Micro ServerProtect Disclosure / CSRF / XSS: Posted May 24, 2017; Authored by Alberto Solino, Core Security Technologies, Maximiliano Vidal, Leandro Barragan | Site coresecurity.com; Trend Micro ServerProtect suffers from information disclosure, manipulation, cross site request forgery, cross site scripting, and various other vulnerabilities.; tags | exploit, vulnerability, xss, info disclosure, csrf; advisories | CVE-2017-9032, CVE-2017-9033, CVE-2017-9034, CVE-2017-9035, CVE-2017-9036, CVE-2017-9037; SHA-256 | 8e879696170b8b1f6b2ecc8c0d882967bb47bb12e348f1e061c984909eef85df; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days