privilege – DigitalMunition

SuSE Linux Enterprise Server 15 munge privilege escalation

January 25th, 2020 📆 | 4065 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: enterprise • escalation • linux • munge • privilege • server

secure_headers Gem up to 3.8.x/5.1.x/6.2.x on Ruby Newline privilege escalation

January 25th, 2020 📆 | 4121 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: escalation • headers • newline • privilege • secure

Ricoh Printer Drivers – Local Privilege Escalation

January 24th, 2020 📆 | 3789 Views ⚑

/* This proof of concept code monitors file changes on Ricoh's driver DLL files and overwrites a DLL file before

Tagged with: drivers • escalation • local • printer • privilege • ricoh

CTFd up to 2.2.2 Registration auth.py register/reset_password privilege escalation

January 24th, 2020 📆 | 5529 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 6.3 $0-$5k 6.71 A vulnerability classified as critical was

Tagged with: escalation • password • privilege • register • registration • reset

Plone 5.2.0/5.2.1 plone.restapi privilege escalation

January 24th, 2020 📆 | 4833 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 3.18+ A vulnerability was found in Plone

Tagged with: escalation • plone • privilege • restapi

Plone up to 5.2.1 privilege escalation [CVE-2020-7941]

January 24th, 2020 📆 | 6472 Views ⚑

A vulnerability was found in Plone up to 5.2.1 (Content Management System). It has been rated as critical. This issue

Tagged with: escalation • plone • privilege

IXP EasyInstall 6.2.13723 Agent Service privilege escalation

January 24th, 2020 📆 | 3485 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: 13723 • agent • easyinstall • escalation • privilege • service

MSX Configurator prior 1.0.8.1 Search Path privilege escalation

January 24th, 2020 📆 | 6889 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: configurator • escalation • prior • privilege • search

Reliable Datagram Sockets (RDS) – rds_atomic_free_op NULL pointer dereference Privilege Escalation (Metasploit)

January 23rd, 2020 📆 | 5133 Views ⚑

## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule 'Reliable Datagram Sockets (RDS) rds_atomic_free_op NULL

Tagged with: atomic • datagram • dereference • pointer • privilege • reliable • sockets

Exploit

Cybersecurity study of the dark web exposes vulnerability to machine identities -- ScienceDaily

Waitress up to 1.3.1 HTTP Header Content-Length HTTP Smuggling privilege escalation

January 23rd, 2020 📆 | 4949 Views ⚑

A vulnerability was found in Waitress up to 1.3.1. It has been rated as critical. This issue affects an unknown

Tagged with: content • escalation • header • length • privilege • smuggling • waitress

Exploit

Multitech Conduit MTCDT-LVW2-24XX 1.4.17-ocea-13592 Debug Options Page ping JSON privilege escalation

January 23rd, 2020 📆 | 5215 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: 13592 • conduit • debug • mtcdt • multitech • options • privilege

Exploit

Qualcomm Snapdragon Auto up to SXR2130 Locked Region privilege escalation

January 21st, 2020 📆 | 8419 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: escalation • locked • privilege • qualcomm • region • snapdragon • sxr2130

Exploit

HPE Superdome Flex Server prior 3.20.206/3.20.186 privilege escalation

January 20th, 2020 📆 | 3255 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: escalation • prior • privilege • server • superdome

Exploit

Nucleus NET V2017.02.2 DHCP Packet privilege escalation

January 20th, 2020 📆 | 5521 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: escalation • nucleus • packet • privilege • v2017

Exploit

Plantronics Hub up to 3.13 on Windows Client Application privilege escalation

January 20th, 2020 📆 | 7392 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: application • client • escalation • plantronics • privilege • windows

Exploit

Siemens SINAMICS PERFECT HARMONY GH180 privilege escalation [CVE-2019-19278]

January 19th, 2020 📆 | 5984 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: escalation • gh180 • harmony • perfect • privilege • siemens • sinamics

Exploit

Centreon Infrastructure Monitoring Software up to 19.10 Perl cwrapper_perl privilege escalation

January 19th, 2020 📆 | 3171 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: centreon • cwrapper • escalation • infrastructure • monitoring • privilege • software

Exploit

Geutebruck G-Code/G-Cam up to 1.12.0.25 URL privilege escalation

January 19th, 2020 📆 | 7951 Views ⚑

A vulnerability was found in Geutebruck G-Code and G-Cam up to 1.12.0.25 and classified as critical. This issue affects some

Tagged with: escalation • geutebruck • privilege

Exploit

Intel RWC 3 prior 7.010.009.000 on Windows Permission privilege escalation

January 19th, 2020 📆 | 4185 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: escalation • intel • permission • prior • privilege • windows

Exploit

Maarch RM up to 2.4 PUT Request privilege escalation

January 19th, 2020 📆 | 6152 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: escalation • maarch • privilege • request

Exploit

Trend Micro Security 2019/Security 2020 privilege escalation

January 18th, 2020 📆 | 2158 Views ⚑

A vulnerability was found in Trend Micro Security 2019 and Security 2020 (affected version unknown). It has been declared as

Tagged with: escalation • micro • privilege • security • trend

Exploit

Microsoft Windows 10 (19H1 1901 x64) – ‘ws2ifsl.sys’ Use After Free Local Privilege Escalation (kASLR kCFG SMEP)

January 18th, 2020 📆 | 6305 Views ⚑

/* The exploit works on 19H1. It was tested with ntoskrnl version 10.0.18362.295 EDB Note: Download ~ https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47935.zip */ #include

Tagged with: after • escalation • local • microsoft • privilege • windows • ws2ifsl

Exploit

Plantronics Hub 3.13.2 – SpokesUpdateService Privilege Escalation (Metasploit)

January 18th, 2020 📆 | 2775 Views ⚑

## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule 'Plantronics Hub SpokesUpdateService Privilege Escalation', 'Description'