Showing 1 - 10 of 10

Files Date: 2018-04-21 to 2018-04-22

Adobe Flash Blur Filtering Out-Of-Bounds Write: Posted Apr 21, 2018; Authored by Google Security Research, natashenka; Adobe Flash suffers from a blur filtering out of bounds write vulnerability.; tags | exploit; advisories | CVE-2018-4937; SHA-256 | db9e4024283035562e2b5eed3fcb41ae9c42cc358c5573aefabdac9a96e2a762; Download | Favorite | View

Adobe Flash Image Inflation Information Disclosure: Posted Apr 21, 2018; Authored by Google Security Research, natashenka; Adobe Flash suffers from an image inflation information disclosure vulnerability.; tags | exploit, info disclosure; advisories | CVE-2018-4934; SHA-256 | f493149efdecbbb22f1232ce036cb91ea06d22c82a1a6023823696fbeaf4aa79; Download | Favorite | View

Adobe Flash Sound Playing Overflow: Posted Apr 21, 2018; Authored by Google Security Research, natashenka; Adobe Flash suffers from a sound playing overflow.; tags | exploit, overflow; advisories | CVE-2018-4936; SHA-256 | 121d28c815ac4c390f122974863648dbf5ab9bc6364b3683c8771981c77849e7; Download | Favorite | View

Adobe Flash Slab Rendering Overflow: Posted Apr 21, 2018; Authored by Google Security Research, natashenka; Adobe Flash suffers from a slab rendering overflow.; tags | exploit, overflow; advisories | CVE-2018-4935; SHA-256 | af3c64e998a4ba846e3dd28e780e824c4906f8f0531d6a873cc5c30f0abc8224; Download | Favorite | View

lastore-daemon D-Bus Privilege Escalation: Posted Apr 21, 2018; Authored by Brendan Coles, Kings Way | Site metasploit.com; This Metasploit module attempts to gain root privileges on Deepin Linux systems by using lastore-daemon to install a package. The lastore-daemon D-Bus configuration on Deepin Linux 15.5 permits any user in the sudo group to install arbitrary system packages without providing a password, resulting in code execution as root. By default, the first user created on the system is a member of the sudo group. This Metasploit module has been tested successfully with lastore-daemon version 0.9.53-1 on Deepin Linux 15.5 (x64).; tags | exploit, arbitrary, root, code execution; systems | linux; SHA-256 | a706b1ff8cc422f8ab6dcfbc87aff49d205b6c1b24a7e6349abee90bb93b40fe; Download | Favorite | View

ASUS infosvr Authentication Bypass Command Execution: Posted Apr 21, 2018; Authored by jduck, Friedrich Postelstorfer | Site metasploit.com; This Metasploit module exploits an authentication bypass vulnerability in the infosvr service running on UDP port 9999 on various ASUS routers to execute arbitrary commands as root. This Metasploit module launches the BusyBox Telnet daemon on the port specified in the TelnetPort option to gain an interactive remote shell. This Metasploit module was tested successfully on an ASUS RT-N12E with firmware version 2.0.0.35. Numerous ASUS models are reportedly affected, but untested.; tags | exploit, remote, arbitrary, shell, root, udp, bypass; advisories | CVE-2014-9583; SHA-256 | 0fd9b3969b4bf0e960fb66268aea32b78e442d90a8d93e78895e7611291a8f43; Download | Favorite | View

Drupal Avatar Uploader 7.x-1.0-beta8 Arbitary File Download: Posted Apr 21, 2018; Authored by Larry W. Cashdollar; Drupal Avatar Uploader module version 7.x-1.0-beta8 suffers from an arbitrary file download vulnerability.; tags | exploit, arbitrary, file inclusion; advisories | CVE-2018-9205; SHA-256 | 4cf85788db1bd1ddd89e069c2f58b01ca89ff2e43c554bce7aa6ad89915e6981; Download | Favorite | View

The Origin And Impact Of Security Vulnerabilities In ST Chipsets: Posted Apr 21, 2018; Site security-explorations.com; This whitepaper explores the origin and impact of the vulnerabilities discovered in ST chipsets.; tags | paper, vulnerability; SHA-256 | 43e3f8317f8b138cdcd0529baa9770438b7cca42407128e39c63e9b17552ce46; Download | Favorite | View

VMware Security Advisory 2018-0010: Posted Apr 21, 2018; Authored by VMware | Site vmware.com; VMware Security Advisory 2018-0010 - Horizon DaaS update addresses a broken authentication issue.; tags | advisory; advisories | CVE-2018-6960; SHA-256 | 58fba5f6cdfb96d0cec816a83967042acd92a07e04561b5260c37af71cb4e7d9; Download | Favorite | View

Chrome V8 JIT NodeProperties::InferReceiverMaps Type Confusion: Posted Apr 21, 2018; Authored by Google Security Research, lokihardt; Chrome V8 JIT suffers from a NodeProperties::InferReceiverMaps type confusion vulnerability.; tags | exploit; SHA-256 | 8f66586231cd91aa2a08984a14f3311417775c1a4895253e34a83ed442b29952; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days