The exploit allows for remote code execution in Centreon 19.04 through a login password bruteforce attack using the centbruteon.py script. By sending specially crafted requests to the Centreon API authentication endpoint, an attacker can execute arbitrary code on the target system.
The Nullsoft Tracker 2 Module Player is vulnerable to a buffer overflow. An attacker can craft a specially crafted module file that, when opened by the player, triggers the buffer overflow and allows for remote code execution.
The crash occurs due to an assertion failure in Wireshark when feeding a malformed file to tshark. The specific error is in wmem_core.c, line 50, where the allocator is expected to be in scope but is not.
This vulnerability allows an attacker to cause a denial of service (DoS) or potentially execute arbitrary code with root privileges by sending a specially crafted message to the powerd com.apple.PowerManagement.control mach service. The vulnerability exists in the pm_mig_demux function, which does not properly handle certain requests, leading to a memory corruption issue.
An elevation of privileges vulnerability exists in the Microsoft AppXSvc Deployment Service. The vulnerability occurs when the service cannot properly handle a folder junction, leading to arbitrary file deletion from a low integrity user.
This module attempts to find D-Link router DIR-600M which is vulnerable to Incorrect Access Control. The vulnerability exists in wan.htm, which is accessible without authentication. This vulnerability can lead an attacker to manipulate WAN settings. This module has been tested successfully on Firmware Version 3.01, 3.02, 3.03, 3.04, 3.05, 3.06.
This module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project's site. Unknown attacker(s) inserted Perl qx statements into the build server's source code on two separate occasions: once in April 2018, introducing the backdoor in the 1.890 release, and in July 2018, reintroducing the backdoor in releases 1.900 through 1.920. Only version 1.890 is exploitable in the default install. Later affected versions require the expired password changing feature to be enabled.
The Linux fair scheduler on NUMA systems has a use-after-free vulnerability in task_struct::numa_faults and task_struct::numa_group. The show_numa_stats() function, which is accessible through /proc/$pid/sched, reads data from ->numa_faults after it has been freed, resulting in a use-after-free read and potential information disclosure to userspace.
This module bypasses the user password requirement in the OpManager v12.4.034 and prior versions. It performs authentication bypass and executes commands on the server. This 0day has been published at DEFCON-AppSec Village.
The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.
Services By CQR