Full write up on the unauthenticated remote code execution and privilege escalation vulnerability in Cisco Prime Infrastructure.
463b73ab6b4dc341e0abdb15816e4711Apple Security Advisory 2018-10-08-1 - iOS 12.0.1 is now available and addresses lock screen issues.
7973fb64f647f02a30d5b632ad7521b0Cisco Prime Infrastructure (CPI) contains two basic flaws that when exploited allow an unauthenticated attacker to achieve remote code execution. The first flaw is a file upload vulnerability that allows the attacker to upload and execute files as the Apache Tomcat user; the second is a privilege escalation to root by bypassing execution restrictions in a SUID binary. This Metasploit module exploits these vulnerabilities to achieve unauthenticated remote code execution as root on the CPI default installation. This Metasploit module has been tested with CPI 3.2.0.0.258 and 3.4.0.0.348. Earlier and later versions might also be affected, although 3.4.0.0.348 is the latest at the time of writing.
05f34986eb4c21ba7fbb27faa2f9bc8fApple Security Advisory 2018-9-24-4 - APPLE-SA-2018-9-24-4 provides additional information for APPLE-SA-2018-9-17-1. iOS 12 is now available and addresses memory corruption and input validation vulnerabilities.
be61103916d6a6155c475e643895c9b9Apple Security Advisory 2018-9-17-1 - iOS 12 is now available and addresses memory corruption and input validation vulnerabilities.
94c7b08f05542c1e82ef6e458f60b472Cisco Umbrella Roaming Client version 2.0.168 suffers from a privilege escalation vulnerability.
077c7382cf0843a8338f4cafa0c01262Cisco AnyConnect Secure Mobility Client version 4.6.01099 suffers from a denial of service vulnerability.
5ed808e3cadb933dedf1473553a3dc6eCisco Network Assistant version 6.3.3 suffers from a denial of service vulnerability.
375bcf577cae1bcc14c321a3df4e319bLinkedin mobile iOS application version 9.11.8592.4 suffers from a CPU resource exhaustion vulnerability.
548e38902cc5abaceaeb0c3f8618bdd6This Metasploit module exploits a security vulnerability in Cisco ASA that would allow an attacker to view sensitive system information without authentication by using directory traversal techniques.
bea90e46bf066fcc060cb43fe700e2feApple Security Advisory 2018-7-23-3 - iOS 11.4 addresses buffer overflow, code execution, and denial of service vulnerabilities.
8427cf26d14947f142aa0d01ecf6404amacOS and iOS suffer from a javascript injection bug in OfficeImporter.
8a77e3c5cc05866fe394bdbf6a928d1bApple Security Advisory 2018-7-9-1 - iOS 11.4.1 is now available and addresses code execution and denial of service vulnerabilities.
45d49e10a5c072897d4d320a7c5c9ee5Cisco Adaptive Security Appliance suffers from a path traversal vulnerability.
ff28a3e2da7f0ca29f3c16fb1eb66ca1The macOS and iOS kernels suffer from a heap overflow due to a lack of lower size check in getvolattrlist.
8bc2ddee4be107c0fed7f5978e377f2cApple Security Advisory 2018-06-01-4 - iOS 11.4 addresses buffer overflow, code execution, and denial of service vulnerabilities.
fc219795904c819a159600cbcb5fc99dCisco SA520W Security Appliance suffers from a path traversal vulnerability.
d8f45b8bfc45f6a23ec142f301ed9a58macOS/iOS ReportCrash suffers from a mach port replacement due to failure to respect MIG ownership rules.
afd5e9434d99e4e48e8d1ec634a2c115Apple Security Advisory 2018-04-24-1 - iOS 11.3.1 is now available and addresses code execution vulnerabilities.
98de22f1867cacebe8daa6b856915c99Apple Security Advisory 2018-3-29-1 - iOS 11.3 is now available and addresses buffer overflow, code execution, and denial of service vulnerabilities.
5b92704b509fc3379df8205091238791Cisco node-jos versions prior to 0.11.0 re-sign tokens proof of concept exploit.
824c38b2de2a94881f541edcaf6779f3Compass Security discovered a design weakness in Microsoft Intune's app protection. This weakness allows a malicious user that gets hold of an employee's iOS device to access company data even without knowing the app PIN.
c46a3d6ea1c728f1cb1a8de7ee96f1f7Cisco ASA crash proof of concept exploit.
49a72c843e58b62bc3926abab78f08edApple Security Advisory 2018-1-23-1 - iOS 11.2.5 is now available and addresses memory corruption, code execution,a nd various other vulnerabilities.
d3a36ff9acb46e7dfe4f877e027f9e25Apple Security Advisory 2018-1-8-1 - iOS 11.2.2 is now available and and addresses Spectre issues with Safari and WebKit.
6b30978ce2ffea24b7346008751663ee
© 2018 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed