Showing 1 - 2 of 2

Files Date: 2018-09-22

Microsoft Windows ALPC Task Scheduler Local Privilege Elevation: Posted Sep 22, 2018; Authored by Jacob Robles, bwatters-r7, SandboxEscaper, asoto-r7 | Site metasploit.com; On vulnerable versions of Windows the alpc endpoint method SchRpcSetSecurity implemented by the task scheduler service can be used to write arbitrary DACLs to .job files located in c:\windows\tasks because the scheduler does not use impersonation when checking this location. Since users can create files in the c:\windows\tasks folder, a hardlink can be created to a file the user has read access to. After creating a hardlink, the vulnerability can be triggered to set the DACL on the linked file. WARNING: The PrintConfig.dll (%windir%\system32\driverstor\filerepository\prnms003*) on the target host will be overwritten when the exploit runs. This Metasploit module has been tested against Windows 10 Pro x64.; tags | exploit, arbitrary; systems | windows; advisories | CVE-2018-8440; SHA-256 | c95cd7c1a2ed4a550a27c66b7fcad45a1a61d5951227bc43830a853f611b7cd1; Download | Favorite | View

MyBB Visual Editor 1.8.18 Cross Site Scripting: Posted Sep 22, 2018; Authored by Numan OZDEMIR; MyBB Visual Editor versions 1.8.18 and below suffer from a cross site scripting vulnerability.; tags | exploit, xss; advisories | CVE-2018-17128; SHA-256 | 9135e598bbd2a86b784c9a282b8fa7393bcf7cdd4921fee77ebf9059e9713571; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days