PolicyKit pkexec Elevation of Privilege Vulnerability Exploit |
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. |
February 4, 2022 |
CVE-2021-4034 |
Linux |
Exploits / Local |
Impact |
NTFS Set Short Name Checker |
This module allow to set a short name 8.3 of a file when you don't have write privileges to the directory where the file is located.The vulnerability exists due to NtfsSetShortNameInfo does not properly impose security restrictions in NTFS Set Short Name, which leads to security restrictions bypass and privilege escalation.
|
January 28, 2022 |
CVE-2021-43240 |
Windows |
Exploits / Tools |
Impact |
WebHMI_RCE |
The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution. Tested on WebHMI 4.0.7475 |
January 18, 2022 |
|
|
Exploits / Remote Code Execution |
SCADAPRO |
Grafana 8.3.0 - Directory Traversal |
Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: (grafana_host_url)/public/plugins//, where is the plugin ID for any installed plugin. |
January 18, 2022 |
|
|
Exploits / Remote File Disclosure |
SCADAPRO |
DBI Technologies Studio Controls for COM Remote Code Execution Vulnerability |
This module will receive HTTP requests from vulnerable clients and install agents on them. |
January 18, 2022 |
|
|
Exploits / Client Side |
SCADAPRO |
Siemens SIMATIC S7-300 CPU Remote Denial of Service |
Specially crafted packets may also be sent to S7-300 CPU Port 80 (default), result in a denial-of-service. |
January 17, 2022 |
|
|
Denial of Service / Remote |
SCADA |
Keysight Communications Fabric Denial of Service |
Remote Denial Keysight Communications Fabric |
January 17, 2022 |
|
Windows |
Denial of Service / Remote |
SCADA |
JatonTec Config Download Vulnerability Exploit |
This module exploits a download the persistent settings file. |
January 17, 2022 |
|
FreeBSD |
Exploits / Remote |
SCADA |
IMT Analytics AG FlowAnalyser FlowLab Remote Code Execution Vulnerability |
This module will receive HTTP requests from vulnerable clients and install RCE exploit on them. |
January 17, 2022 |
|
|
Exploits / Client Side |
SCADA |
Raspberry Pi Default Credentials Exploit |
Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges. |
January 6, 2022 |
CVE-2021-38759 |
|
Exploits / Remote |
Impact |
Microsoft Windows NTFS Elevation of Privilege Vulnerability Exploit |
An elevation of privilege vulnerability exists in Windows when the NTFS component fails to properly handle objects in memory.
An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, then install programs, view,
change, delete data or create new accounts with full user rights.
|
December 27, 2021 |
CVE-2021-31956 |
Windows |
Exploits / Local |
Impact |
Grafana getPluginAssets Path Traversal Local File Disclosure Exploit |
A path traversal vulnerability in Grafana may allow an unauthenticated attacker to download system files through specially crafted HTTP resource requests. |
December 21, 2021 |
CVE-2021-43798 |
Windows, Linux |
Exploits / Remote File Disclosure |
Impact |
VMware vCenter Server Log4shell Remote Code Execution Vulnerability Exploit |
JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vCenter Server, allows unauthenticated attackers to execute system commands. |
December 13, 2021 |
CVE-2021-44228 |
Windows, Linux |
Exploits / Remote Code Execution |
Impact |
VMware vRealize Operations Manager Log4shell Remote Code Execution Vulnerability Exploit |
JNDI features used in configuration, log messages, and parameters present in Apache Log4j2 do not protect against attacker controlled LDAP and other JNDI related endpoints. This library, used by VMware vRealize Operations Manager, allows unauthenticated attackers to execute system commands. |
December 13, 2021 |
CVE-2021-44228 |
Linux |
Exploits / Remote Code Execution |
Impact |
Microsoft Exchange TypedBinaryFormatter Deserialization Remote Code Execution Vulnerability Exploit |
A deserialization vulnerability present in the TypedBinaryFormatter class allows authenticated remote attackers to execute arbitrary OS commands with SYSTEM user privileges. |
December 10, 2021 |
CVE-2021-42321 |
Windows |
Exploits / Remote Code Execution |
Impact |
Microsoft Windows Kernel ObpCreateSymbolicLinkName Denial of Service Exploit Update |
This module leverages on a race condition in the Windows kernel using symbolic links to crash the system.
This update adds the CVE number |
December 10, 2021 |
CVE-2021-41335 |
Windows |
Denial of Service / Local |
Impact |
Wordpress <4.9.6 Arbitrary File Delete CVE-2018-12895 |
Wordpress |
December 9, 2021 |
|
|
Exploits / Remote |
SCADAPRO |
PHPMyAdmin CVE-2018-12613 |
PHPMyAdmin Remote Code Execution |
December 9, 2021 |
|
Windows, Linux |
Exploits / Remote Code Execution |
SCADAPRO |
Handysoft Co., Ltd Groupware HShell.dll Remote Code Execution Vulnerability |
This module will receive HTTP requests from vulnerable clients and install agents on them. |
December 9, 2021 |
CVE-2021-26608 |
|
Exploits / Client Side |
SCADAPRO |
GitLab 13.10.2 - Remote Code Execution |
CVE-2021-22205 An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.
Tested on GitLab CE 13.10.2 |
December 9, 2021 |
|
|
Exploits / Remote Code Execution |
SCADAPRO |
Soyal VisualProx Access Control Denial of Service |
Remote Denial Soyal VisualProx Access Control |
December 9, 2021 |
|
Windows |
Denial of Service / Remote |
SCADA |
Eaton Visual Designer v7.1 software Remote Code Execution Vulnerability |
This module will receive HTTP requests from vulnerable clients and install agents on them. |
December 9, 2021 |
|
|
Exploits / Client Side |
SCADA |
Eaton Lean Automation XP12inDemoProgram Directory Traversal and file disclosure Vulnerability |
This module exploits a directory traversal vulnerability in Eaton Automation XP12inDemoProgram |
December 9, 2021 |
|
Windows |
Exploits / Remote |
SCADA |
Linux Kernel Netfilter Xt Compat Target From User Local Privilege Escalation Exploit |
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.
|
December 1, 2021 |
CVE-2021-22555 |
Linux |
Exploits / Local |
Impact |
Atlassian Confluence Webwork OGNL Injection Vulnerability Exploit |
An OGNL injection vulnerability in Confluence Server and Data Center allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. |
November 25, 2021 |
CVE-2021-26084 |
Linux, Windows |
Exploits / Remote Code Execution |
Impact |