PolicyKit pkexec Elevation of Privilege Vulnerability Exploit |
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. |
February 4, 2022 |
CVE-2021-4034 |
Linux |
Exploits / Local |
Impact |
NTFS Set Short Name Checker |
This module allow to set a short name 8.3 of a file when you don't have write privileges to the directory where the file is located.The vulnerability exists due to NtfsSetShortNameInfo does not properly impose security restrictions in NTFS Set Short Name, which leads to security restrictions bypass and privilege escalation.
|
January 28, 2022 |
CVE-2021-43240 |
Windows |
Exploits / Tools |
Impact |
Raspberry Pi Default Credentials Exploit |
Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges. |
January 6, 2022 |
CVE-2021-38759 |
|
Exploits / Remote |
Impact |
Microsoft Windows NTFS Elevation of Privilege Vulnerability Exploit |
An elevation of privilege vulnerability exists in Windows when the NTFS component fails to properly handle objects in memory.
An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, then install programs, view,
change, delete data or create new accounts with full user rights.
|
December 27, 2021 |
CVE-2021-31956 |
Windows |
Exploits / Local |
Impact |
Grafana getPluginAssets Path Traversal Local File Disclosure Exploit |
A path traversal vulnerability in Grafana may allow an unauthenticated attacker to download system files through specially crafted HTTP resource requests. |
December 21, 2021 |
CVE-2021-43798 |
Windows, Linux |
Exploits / Remote File Disclosure |
Impact |
VMware vCenter Server Log4shell Remote Code Execution Vulnerability Exploit |
JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vCenter Server, allows unauthenticated attackers to execute system commands. |
December 13, 2021 |
CVE-2021-44228 |
Windows, Linux |
Exploits / Remote Code Execution |
Impact |
VMware vRealize Operations Manager Log4shell Remote Code Execution Vulnerability Exploit |
JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vRealize Operations Manager, allows unauthenticated attackers to execute system commands. |
December 13, 2021 |
CVE-2021-44228 |
Linux |
Exploits / Remote Code Execution |
Impact |
Microsoft Exchange TypedBinaryFormatter Deserialization Remote Code Execution Vulnerability Exploit |
A deserialization vulnerability present in the TypedBinaryFormatter class allows authenticated remote attackers to execute arbitrary OS commands with SYSTEM user privileges. |
December 10, 2021 |
CVE-2021-42321 |
Windows |
Exploits / Remote Code Execution |
Impact |
Microsoft Windows Kernel ObpCreateSymbolicLinkName Denial of Service Exploit Update |
This module leverages on a race condition in the Windows kernel using symbolic links to crash the system.
This update adds the CVE number |
December 10, 2021 |
CVE-2021-41335 |
Windows |
Denial of Service / Local |
Impact |
Wordpress <4.9.6 Arbitrary File Delete CVE-2018-12895 |
Wordpress |
December 9, 2021 |
|
|
Exploits / Remote |
SCADAPRO |
PHPMyAdmin CVE-2018-12613 |
PHPMyAdmin Remote Code Execution |
December 9, 2021 |
|
Windows, Linux |
Exploits / Remote Code Execution |
SCADAPRO |
Handysoft Co., Ltd Groupware HShell.dll Remote Code Execution Vulnerability |
This module will receive HTTP requests from vulnerable clients and install agents on them. |
December 9, 2021 |
CVE-2021-26608 |
|
Exploits / Client Side |
SCADAPRO |
GitLab 13.10.2 - Remote Code Execution |
CVE-2021-22205 An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.
Tested on GitLab CE 13.10.2 |
December 9, 2021 |
|
|
Exploits / Remote Code Execution |
SCADAPRO |
Soyal VisualProx Access Control Denial of Service |
Remote Denial Soyal VisualProx Access Control |
December 9, 2021 |
|
Windows |
Denial of Service / Remote |
SCADA |
Eaton Visual Designer v7.1 software Remote Code Execution Vulnerability |
This module will receive HTTP requests from vulnerable clients and install agents on them. |
December 9, 2021 |
|
|
Exploits / Client Side |
SCADA |
Eaton Lean Automation XP12inDemoProgram Directory Traversal and file disclosure Vulnerability |
This module exploits a directory traversal vulnerability in Eaton Automation XP12inDemoProgram |
December 9, 2021 |
|
Windows |
Exploits / Remote |
SCADA |
Linux Kernel Netfilter Xt Compat Target From User Local Privilege Escalation Exploit |
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.
|
December 1, 2021 |
CVE-2021-22555 |
Linux |
Exploits / Local |
Impact |
Atlassian Confluence Webwork OGNL Injection Vulnerability Exploit |
An OGNL injection vulnerability in Confluence Server and Data Center allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. |
November 25, 2021 |
CVE-2021-26084 |
Linux, Windows |
Exploits / Remote Code Execution |
Impact |
Canon Printer TR150 Driver Local Privilege Escalation Exploit |
The Canon TR150 print driver is vulnerable to a privilege escalation issue. During the add printer process an attacker can overwrite a DLL and, if timed properly, the overwritten DLL will be loaded into a SYSTEM process resulting in escalation of privileges. |
November 18, 2021 |
CVE-2021-38085 |
Windows |
Exploits / Local |
Impact |
Mitsubishi Electric and INEA SmartRTU Source Code Disclosure Vulnerability |
Mitsubishi Electric meets these demands with the smartRTU. It supports protocols such as DNP3 and IEC 60870. The smart- RTU combines the reliability and robustness of our standard PLC technology with a smart communication gateway, the ME-RTU gateway. |
November 12, 2021 |
CVE-2021-40382 |
|
Exploits / Client Side |
SCADAPRO |
Atlassian Jira Server/Data Center 8.16.0 - Cross-Site Scripting |
CVE-2021-26078 The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via across site scripting (XSS) vulnerability. |
November 12, 2021 |
|
|
Exploits / Remote |
SCADAPRO |
Jeedom 4.1.19 Authenticated Privilege Escalation |
Jeedom 4.1.19 Dashboard Authorized Privilege Escalation |
November 12, 2021 |
|
|
Exploits / Remote |
SCADAPRO |
Delta Industrial Automation COMMGR (ModBus) 1.08 Denial of Service |
Remote Denial Delta Industrial Automation COMMGR |
November 12, 2021 |
|
Windows |
Denial of Service / Remote |
SCADAPRO |
Confluence 7.12.2 - Arbitrary File Read |
CVE-2021-26085 Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.
Tested against Atlassian Confluence 7.12.2 |
November 12, 2021 |
|
|
Exploits / Remote File Disclosure |
SCADAPRO |
ECOA Building Automation System Config file download |
ECOA Building Automation System configuration download |
November 12, 2021 |
|
|
Exploits / Client Side |
SCADA |