Showing 1 - 4 of 4

Files from Christophe de la Fuente

Cisco AnyConnect Privilege Escalation: Posted Sep 30, 2020; Authored by Yorick Koster, Christophe de la Fuente, Antoine Goichot | Site metasploit.com; The installer component of Cisco AnyConnect Secure Mobility Client for Windows prior to 4.8.02042 is vulnerable to path traversal and allows local attackers to create/overwrite files in arbitrary locations with system level privileges. The installer component of Cisco AnyConnect Secure Mobility Client for Windows prior to 4.9.00086 is vulnerable to a DLL hijacking and allows local attackers to execute code on the affected machine with with system level privileges. Both attacks consist in sending a specially crafted IPC request to the TCP port 62522 on the loopback device, which is exposed by the Cisco AnyConnect Secure Mobility Agent service.; tags | exploit, arbitrary, local, tcp; systems | cisco, windows; advisories | CVE-2020-3153, CVE-2020-3433; MD5 | 6dab51a6758b6569e7dba4af74f482ed; Download | Favorite | View

Cisco AnyConnect Path Traversal / Privilege Escalation: Posted Jun 25, 2020; Authored by Yorick Koster, Christophe de la Fuente, Antoine Goichot | Site metasploit.com; The installer component of Cisco AnyConnect Secure Mobility Client for Windows prior to version 4.8.02042 is vulnerable to path traversal and allows local attackers to create/overwrite files in arbitrary locations with system level privileges. The attack consists in sending a specially crafted IPC request to the TCP port 62522 on the loopback device, which is exposed by the Cisco AnyConnect Secure Mobility Agent service. This service will then launch the vulnerable installer component (vpndownloader), which copies itself to an arbitrary location before being executed with system privileges. Since vpndownloader is also vulnerable to DLL hijacking, a specially crafted DLL (dbghelp.dll) is created at the same location vpndownloader will be copied to get code execution with system privileges. This exploit has been successfully tested against Cisco AnyConnect Secure Mobility Client versions 4.5.04029, 4.5.05030 and 4.7.04056 on Windows 10 version 1909 (x64) and Windows 7 SP1 (x86).; tags | exploit, arbitrary, x86, local, tcp, code execution; systems | cisco, windows, 7; advisories | CVE-2020-3153; MD5 | 0ce466f922be78b19e5b1169c13ef711; Download | Favorite | View

Merethis Centreon 2.3.1 Code Execution: Posted Nov 8, 2011; Authored by Christophe de la Fuente | Site trustwave.com; The Centreon supervision and monitoring tool provided by Merethis permits remote code execution from the command help web page allowing an attacker to execute arbitrary commands in the context of the webserver hosting the application. The system also uses a one-way hash without a salt. Versions 2.3.1 and below are affected.; tags | exploit, remote, web, arbitrary, code execution; MD5 | a6b0f2282a375e29d3f39931335be4e4; Download | Favorite | View

Publique! Framework 2.3 SQL Injection: Posted Jan 26, 2010; Authored by Christophe de la Fuente, Gustavo Pimentel Bittencourt; Publique! Framework version 2.3 suffers from a remote SQL injection vulnerability.; tags | exploit, remote, sql injection; MD5 | 049f0acbfc1cd3a6c121dedc597ace79; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days