qCX9thwJ

1<rss xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0" encoding="UTF-8">
2<channel>
3<title>The Exploit Database - CXSecurity.com</title>
4<link>https://cxsecurity.com/wlb/</link>
5<description>
6The Exploit Database - World Laboratory of Bugtraq 2 CXSecurity.com
7</description>
8<language>en-US</language>
9<lastBuildDate>Wed, 16 May 2018 06:18:35 -0500</lastBuildDate>
10<copyright>CXSecurity</copyright>
11<image>
12<title>CXSecurity: World Laboratory of Bugtraq 2</title>
13<link>https://cxsecurity.com/wlb/rss/exploit/</link>
14<url>https://cxsecurity.com/images/wlb/wlblogo.png</url>
15<description>
16The Exploit Database - World Laboratory of Bugtraq 2 (WLB2)
17</description>
18</image>
19<item>
20<title>WhatsApp 2.18.31 iOS Memory Corruption</title>
21<link>https://cxsecurity.com/issue/WLB-2018050104</link>
22<guid>WLB-2018050104</guid>
23<lastBuildDate>2018-05-16 01:26:24 CET</lastBuildDate>
24<dc:creator>Juan Sacco</dc:creator>
25<description>
26Topic: WhatsApp 2.18.31 iOS Memory Corruption Risk: Low Text:#!/usr/bin/env python # -*- coding: utf-8 -*- # Exploit Author: Juan Sacco < jsacco@exploitpack.com> at Exploit Pack - http:/...
27</description>
28<pubDate>Wed, 16 May 2018 01:26:24 -0500</pubDate>
29</item>
30<item>
31<title>
32Microsoft Windows 2003 SP2 RRAS SMB Remote Code Execution
33</title>
34<link>https://cxsecurity.com/issue/WLB-2018050092</link>
35<guid>WLB-2018050092</guid>
36<lastBuildDate>2018-05-14 07:35:01 CET</lastBuildDate>
37<dc:creator>vportal</dc:creator>
38<description>
39Topic: Microsoft Windows 2003 SP2 RRAS SMB Remote Code Execution Risk: High Text:#!/usr/bin/env python # -*- coding: utf-8 -*- #Tested in Windows Server 2003 SP2 (ES) - Only works when RRAS service is enabl...
40</description>
41<pubDate>Mon, 14 May 2018 07:35:01 -0500</pubDate>
42</item>
43<item>
44<title>Dell Touchpad ApMsgFwd.exe Denial Of Service</title>
45<link>https://cxsecurity.com/issue/WLB-2018050077</link>
46<guid>WLB-2018050077</guid>
47<lastBuildDate>2018-05-12 02:20:02 CET</lastBuildDate>
48<dc:creator>Souhail Hammou</dc:creator>
49<description>
50Topic: Dell Touchpad ApMsgFwd.exe Denial Of Service Risk: Medium Text:/* Title: Dell Touchpad - ApMsgFwd.exe Denial Of Service Author: Souhail Hammou Vendor Homepage: https://www.alps.com/ Test...
51</description>
52<pubDate>Sat, 12 May 2018 02:20:02 -0500</pubDate>
53</item>
54<item>
55<title>Allok Video Splitter 3.1.12.17 Denial of Service</title>
56<link>https://cxsecurity.com/issue/WLB-2018050067</link>
57<guid>WLB-2018050067</guid>
58<lastBuildDate>2018-05-10 01:00:03 CET</lastBuildDate>
59<dc:creator>Achilles</dc:creator>
60<description>
61Topic: Allok Video Splitter 3.1.12.17 Denial of Service Risk: Low Text: # # Exploit Title: Allok Video Splitter 3.1.1217 # Date: 2018-05-09 # Exploit Author: Achilles...
62</description>
63<pubDate>Thu, 10 May 2018 01:00:03 -0500</pubDate>
64</item>
65<item>
66<title>Windows 7 WMI Recieve Notification Exploit</title>
67<link>https://cxsecurity.com/issue/WLB-2018050066</link>
68<guid>WLB-2018050066</guid>
69<lastBuildDate>2018-05-09 15:41:52 CET</lastBuildDate>
70<dc:creator>Anonymous</dc:creator>
71<description>
72Topic: Windows 7 WMI Recieve Notification Exploit Risk: High Text:## # This module requires Metasploit: http://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-f...
73</description>
74<pubDate>Wed, 09 May 2018 15:41:52 -0500</pubDate>
75</item>
76<item>
77<title>Mantis 1.1.3 manage_proj_page PHP Code Execution</title>
78<link>https://cxsecurity.com/issue/WLB-2018050059</link>
79<guid>WLB-2018050059</guid>
80<lastBuildDate>2018-05-09 15:35:10 CET</lastBuildDate>
81<dc:creator>EgiX</dc:creator>
82<description>
83Topic: Mantis 1.1.3 manage_proj_page PHP Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...
84</description>
85<pubDate>Wed, 09 May 2018 15:35:09 -0500</pubDate>
86</item>
87<item>
88<title>HWiNFO 5.82-3410 Denial Of Service</title>
89<link>https://cxsecurity.com/issue/WLB-2018050050</link>
90<guid>WLB-2018050050</guid>
91<lastBuildDate>2018-05-08 09:03:12 CET</lastBuildDate>
92<dc:creator>bzyo</dc:creator>
93<description>
94Topic: HWiNFO 5.82-3410 Denial Of Service Risk: Medium Text:#!/usr/bin/python # # Exploit Author: bzyo # Twitter: @bzyo_ # Exploit Title: HWiNFO 5.82-3410 - Denial of Service # Date:...
95</description>
96<pubDate>Tue, 08 May 2018 09:03:12 -0500</pubDate>
97</item>
98<item>
99<title>
100Palo Alto Networks readSessionVarsFromFile() Session Corruption
101</title>
102<link>https://cxsecurity.com/issue/WLB-2018050049</link>
103<guid>WLB-2018050049</guid>
104<lastBuildDate>2018-05-08 01:25:16 CET</lastBuildDate>
105<dc:creator>H D Moore</dc:creator>
106<description>
107Topic: Palo Alto Networks readSessionVarsFromFile() Session Corruption Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...
108</description>
109<pubDate>Tue, 08 May 2018 01:25:16 -0500</pubDate>
110</item>
111<item>
112<title>PlaySMS import.php Code Execution</title>
113<link>https://cxsecurity.com/issue/WLB-2018050047</link>
114<guid>WLB-2018050047</guid>
115<lastBuildDate>2018-05-08 01:23:05 CET</lastBuildDate>
116<dc:creator>Touhid M.Shaikh</dc:creator>
117<description>
118Topic: PlaySMS import.php Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...
119</description>
120<pubDate>Tue, 08 May 2018 01:23:05 -0500</pubDate>
121</item>
122<item>
123<title>PlaySMS sendfromfile.php Code Execution</title>
124<link>https://cxsecurity.com/issue/WLB-2018050046</link>
125<guid>WLB-2018050046</guid>
126<lastBuildDate>2018-05-08 01:22:35 CET</lastBuildDate>
127<dc:creator>Touhid M.Shaikh</dc:creator>
128<description>
129Topic: PlaySMS sendfromfile.php Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...
130</description>
131<pubDate>Tue, 08 May 2018 01:22:35 -0500</pubDate>
132</item>
133<item>
134<title>
135WordPress Plugin User Role Editor < 4.25 Privilege Escalation
136</title>
137<link>https://cxsecurity.com/issue/WLB-2018050044</link>
138<guid>WLB-2018050044</guid>
139<lastBuildDate>2018-05-07 01:58:58 CET</lastBuildDate>
140<dc:creator>Tomislav Paskalev</dc:creator>
141<description>
142Topic: WordPress Plugin User Role Editor < 4.25 Privilege Escalation Risk: Medium Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...
143</description>
144<pubDate>Mon, 07 May 2018 01:58:49 -0500</pubDate>
145</item>
146<item>
147<title>Adobe Reader PDF Client-Side Request Injection</title>
148<link>https://cxsecurity.com/issue/WLB-2018050020</link>
149<guid>WLB-2018050020</guid>
150<lastBuildDate>2018-05-04 06:14:11 CET</lastBuildDate>
151<dc:creator>Alex Infuhr</dc:creator>
152<description>
153Topic: Adobe Reader PDF Client-Side Request Injection Risk: Medium Text:% a PDF file using an XFA % most whitespace can be removed (truncated to 570 bytes or so...) % Ange Albertini BSD Licence 201...
154</description>
155<pubDate>Fri, 04 May 2018 06:14:11 -0500</pubDate>
156</item>
157<item>
158<title>TBK DVR4104 / DVR4216 Credential Disclosure</title>
159<link>https://cxsecurity.com/issue/WLB-2018050019</link>
160<guid>WLB-2018050019</guid>
161<lastBuildDate>2018-05-04 06:13:16 CET</lastBuildDate>
162<dc:creator>Fernandez Ezequiel</dc:creator>
163<description>
164Topic: TBK DVR4104 / DVR4216 Credential Disclosure Risk: Medium Text:# -*- coding: utf-8 -*- import json import requests import argparse import tableprint as tp class Colors: BLUE ...
165</description>
166<pubDate>Fri, 04 May 2018 06:13:16 -0500</pubDate>
167</item>
168<item>
169<title>
170LibreOffice 6.0.3 / OpenOffice 4.1.5 Information Disclosure
171</title>
172<link>https://cxsecurity.com/issue/WLB-2018050013</link>
173<guid>WLB-2018050013</guid>
174<lastBuildDate>2018-05-03 02:11:23 CET</lastBuildDate>
175<dc:creator>Richard Davy</dc:creator>
176<description>
177Topic: LibreOffice 6.0.3 / OpenOffice 4.1.5 Information Disclosure Risk: Low Text:#! /usr/bin/python # Exploit Title: Malicious ODF File Creator # Date: 1st May 2018 # Exploit Author: Richard Davy # Ven...
178</description>
179<pubDate>Thu, 03 May 2018 02:11:23 -0500</pubDate>
180</item>
181<item>
182<title>Navicat < 12.0.27 Oracle Connection Overflow</title>
183<link>https://cxsecurity.com/issue/WLB-2018050011</link>
184<guid>WLB-2018050011</guid>
185<lastBuildDate>2018-05-03 02:10:32 CET</lastBuildDate>
186<dc:creator>Kevin McGuigan</dc:creator>
187<description>
188Topic: Navicat < 12.0.27 Oracle Connection Overflow Risk: High Text:#!/usr/bin/python # Title: Navicat < 12.0.27 Oracle Connection Overflow # Author: Kevin McGuigan # Twitter: @_h3xagram # Au...
189</description>
190<pubDate>Thu, 03 May 2018 02:10:31 -0500</pubDate>
191</item>
192<item>
193<title>Exim < 4.90.1 base64d Remote Code Execution</title>
194<link>https://cxsecurity.com/issue/WLB-2018050010</link>
195<guid>WLB-2018050010</guid>
196<lastBuildDate>2018-05-02 12:38:31 CET</lastBuildDate>
197<dc:creator>straight_blast</dc:creator>
198<description>
199Topic: Exim < 4.90.1 base64d Remote Code Execution Risk: High Text:#!/usr/bin/python import time import socket import struct s = None f = None def logo(): print print " CVE-...
200</description>
201<pubDate>Wed, 02 May 2018 12:38:31 -0500</pubDate>
202</item>
203<item>
204<title>xdebug Unauthenticated OS Command Execution</title>
205<link>https://cxsecurity.com/issue/WLB-2018050006</link>
206<guid>WLB-2018050006</guid>
207<lastBuildDate>2018-05-02 09:31:05 CET</lastBuildDate>
208<dc:creator>Mumbai</dc:creator>
209<description>
210Topic: xdebug Unauthenticated OS Command Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-...
211</description>
212<pubDate>Wed, 02 May 2018 09:31:05 -0500</pubDate>
213</item>
214<item>
215<title>
216macOS/iOS ReportCrash mach port Replacement due to Failure to Respect MIG Ownership Rules
217</title>
218<link>https://cxsecurity.com/issue/WLB-2018040241</link>
219<guid>WLB-2018040241</guid>
220<lastBuildDate>2018-04-30 13:13:30 CET</lastBuildDate>
221<dc:creator>Google Security Research</dc:creator>
222<description>
223Topic: macOS/iOS ReportCrash mach port Replacement due to Failure to Respect MIG Ownership Rules Risk: High Text:/* ReportCrash is the daemon responsible for making crash dumps of crashing userspace processes. Most processes can talk to R...
224</description>
225<pubDate>Mon, 30 Apr 2018 13:13:30 -0500</pubDate>
226</item>
227<item>
228<title>
229Oracle Weblogic Server 10.3.6.0 / 12.1.3.0 / 12.2.1.2 / 12.2.1.3 Deserialization Remote Command Execution
230</title>
231<link>https://cxsecurity.com/issue/WLB-2018040237</link>
232<guid>WLB-2018040237</guid>
233<lastBuildDate>2018-04-29 13:55:16 CET</lastBuildDate>
234<dc:creator>Liao Xinxi</dc:creator>
235<description>
236Topic: Oracle Weblogic Server 10.3.6.0 / 12.1.3.0 / 12.2.1.2 / 12.2.1.3 Deserialization Remote Command Execution Risk: High Text:# -*- coding: utf-8 -*- # Oracle Weblogic Server (10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3) Deserialization Remote Command Execu...
237</description>
238<pubDate>Sun, 29 Apr 2018 13:55:16 -0500</pubDate>
239</item>
240<item>
241<title>Chrome V8 JIT Arrow Function Scope Fixing Bug</title>
242<link>https://cxsecurity.com/issue/WLB-2018040207</link>
243<guid>WLB-2018040207</guid>
244<lastBuildDate>2018-04-26 02:10:25 CET</lastBuildDate>
245<dc:creator>Google Security Research</dc:creator>
246<description>
247Topic: Chrome V8 JIT Arrow Function Scope Fixing Bug Risk: Medium Text:/* When the parser parses the parameter list of an arrow function contaning destructuring assignments, it can't distinguish wh...
248</description>
249<pubDate>Thu, 26 Apr 2018 02:10:25 -0500</pubDate>
250</item>
251<item>
252<title>Chrome V8 JIT AwaitedPromise Update Bug</title>
253<link>https://cxsecurity.com/issue/WLB-2018040206</link>
254<guid>WLB-2018040206</guid>
255<lastBuildDate>2018-04-26 02:09:41 CET</lastBuildDate>
256<dc:creator>Google Security Research</dc:creator>
257<description>
258Topic: Chrome V8 JIT AwaitedPromise Update Bug Risk: Medium Text:/* Here's a snippet of AsyncGeneratorReturn. (https://cs.chromium.org/chromium/src/v8/src/builtins/builtins-async-generator-ge...
259</description>
260<pubDate>Thu, 26 Apr 2018 02:09:41 -0500</pubDate>
261</item>
262<item>
263<title>
264VMware Workstation 12.5.2 Drag n Drop Use-After-Free (Pwn2Own 2017)
265</title>
266<link>https://cxsecurity.com/issue/WLB-2018040204</link>
267<guid>WLB-2018040204</guid>
268<lastBuildDate>2018-04-26 02:08:05 CET</lastBuildDate>
269<dc:creator>keenlab</dc:creator>
270<description>
271Topic: VMware Workstation 12.5.2 Drag n Drop Use-After-Free (Pwn2Own 2017) Risk: Medium Text:char *initial_dnd = "tools.capability.dnd_version 4"; static const int cbObj = 0x100; char *second_dnd = "tools.capability.dn...
272</description>
273<pubDate>Thu, 26 Apr 2018 02:08:05 -0500</pubDate>
274</item>
275<item>
276<title>Allok Video To DVD Burner 2.6.1217 Buffer Overflow</title>
277<link>https://cxsecurity.com/issue/WLB-2018040202</link>
278<guid>WLB-2018040202</guid>
279<lastBuildDate>2018-04-25 07:26:45 CET</lastBuildDate>
280<dc:creator>T3jv1l</dc:creator>
281<description>
282Topic: Allok Video To DVD Burner 2.6.1217 Buffer Overflow Risk: High Text: # # Exploit Title: Buffer Overflow(SEH) on Allok Video to DVD Burner2.6.1217 # Date: 23.04.2018 # Exploit...
283</description>
284<pubDate>Wed, 25 Apr 2018 07:26:45 -0500</pubDate>
285</item>
286<item>
287<title>R 3.4.4 Local Buffer Overflow</title>
288<link>https://cxsecurity.com/issue/WLB-2018040200</link>
289<guid>WLB-2018040200</guid>
290<lastBuildDate>2018-04-25 04:15:56 CET</lastBuildDate>
291<dc:creator>bzyo</dc:creator>
292<description>
293Topic: R 3.4.4 Local Buffer Overflow Risk: High Text:#!/usr/bin/python # # Exploit Author: bzyo # CVE: CVE-2018-9060 # Twitter: @bzyo_ # Exploit Title: R 3.4.4 - Local Buffe...
294</description>
295<pubDate>Wed, 25 Apr 2018 04:15:56 -0500</pubDate>
296</item>
297<item>
298<title>
299Easy File Sharing Web Server 7.2 UserID Buffer Overflow
300</title>
301<link>https://cxsecurity.com/issue/WLB-2018040197</link>
302<guid>WLB-2018040197</guid>
303<lastBuildDate>2018-04-25 04:14:31 CET</lastBuildDate>
304<dc:creator>Hashim Jawad</dc:creator>
305<description>
306Topic: Easy File Sharing Web Server 7.2 UserID Buffer Overflow Risk: Medium Text:#!/usr/bin/env python # # # Exploit Title : Easy File Sharing Web Server 7.2 - 'UserID' Rem...
307</description>
308<pubDate>Wed, 25 Apr 2018 04:14:31 -0500</pubDate>
309</item>
310<item>
311<title>
312PRTG Network Monitor < 18.1.39.1648 Stack Overflow (Denial of Service)
313</title>
314<link>https://cxsecurity.com/issue/WLB-2018040190</link>
315<guid>WLB-2018040190</guid>
316<lastBuildDate>2018-04-24 01:09:59 CET</lastBuildDate>
317<dc:creator>luriel</dc:creator>
318<description>
319Topic: PRTG Network Monitor < 18.1.39.1648 Stack Overflow (Denial of Service) Risk: Low Text:# Exploit Title: PRTG 18.1.39.1648 - Stack Overflow # Date: 2018-04-21 # Exploit Author: Lucas "luriel" Carmo # Vendor Homep...
320</description>
321<pubDate>Tue, 24 Apr 2018 01:09:59 -0500</pubDate>
322</item>
323<item>
324<title>
325Apache CouchDB 1.7.0 and 2.x before 2.1.1 Remote Privilege Escalation
326</title>
327<link>https://cxsecurity.com/issue/WLB-2018040189</link>
328<guid>WLB-2018040189</guid>
329<lastBuildDate>2018-04-24 01:09:24 CET</lastBuildDate>
330<dc:creator>r4wd3r</dc:creator>
331<description>
332Topic: Apache CouchDB 1.7.0 and 2.x before 2.1.1 Remote Privilege Escalation Risk: Medium Text:# Exploit Title: Apache CouchDB JSON 1.7.0 and 2.x before 2.1.1 - Remote Privilege Escalation # Date: 2017-08-07 # Exploit Au...
333</description>
334<pubDate>Tue, 24 Apr 2018 01:09:24 -0500</pubDate>
335</item>
336<item>
337<title>
338VLC Media Player/Kodi/PopcornTime 'Red Chimera' < 2.2.5 Memory Corruption (PoC)
339</title>
340<link>https://cxsecurity.com/issue/WLB-2018040185</link>
341<guid>WLB-2018040185</guid>
342<lastBuildDate>2018-04-23 02:41:20 CET</lastBuildDate>
343<dc:creator>SivertPL</dc:creator>
344<description>
345Topic: VLC Media Player/Kodi/PopcornTime 'Red Chimera' < 2.2.5 Memory Corruption (PoC) Risk: High Text:""" VLC Media Player/Kodi/PopcornTime 'Red Chimera' < 2.2.5 Memory Corruption (PoC) Author: SivertPL (kroppoloe@protonmail.ch...
346</description>
347<pubDate>Mon, 23 Apr 2018 02:41:20 -0500</pubDate>
348</item>
349<item>
350<title>
351ASUS infosvr Authentication Bypass Command Execution
352</title>
353<link>https://cxsecurity.com/issue/WLB-2018040179</link>
354<guid>WLB-2018040179</guid>
355<lastBuildDate>2018-04-22 05:23:43 CET</lastBuildDate>
356<dc:creator>jduck</dc:creator>
357<description>
358Topic: ASUS infosvr Authentication Bypass Command Execution Risk: High Text:## # This module requires Metasploit: http://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-f...
359</description>
360<pubDate>Sun, 22 Apr 2018 05:23:43 -0500</pubDate>
361</item>
362<item>
363<title>VX Search 10.6.18 Local Buffer Overflow</title>
364<link>https://cxsecurity.com/issue/WLB-2018040161</link>
365<guid>WLB-2018040161</guid>
366<lastBuildDate>2018-04-19 04:41:51 CET</lastBuildDate>
367<dc:creator>Kevin McGuigan</dc:creator>
368<description>
369Topic: VX Search 10.6.18 Local Buffer Overflow Risk: High Text:#!/usr/bin/python # Title: VX Search 10.6.18 Local Buffer Overflow # Author: Kevin McGuigan # Twitter: @_h3xagram # Author ...
370</description>
371<pubDate>Thu, 19 Apr 2018 04:41:51 -0500</pubDate>
372</item>
373<item>
374<title>VX Search 10.6.18 directory Local Buffer Overflow</title>
375<link>https://cxsecurity.com/issue/WLB-2018040158</link>
376<guid>WLB-2018040158</guid>
377<lastBuildDate>2018-04-19 01:58:00 CET</lastBuildDate>
378<dc:creator>Kevin McGuigan</dc:creator>
379<description>
380Topic: VX Search 10.6.18 directory Local Buffer Overflow Risk: High Text:#!/usr/bin/python # Title: VX Search 10.6.18 Local Buffer Overflow # Author: Kevin McGuigan # Twitter: @_h3xagram # Author ...
381</description>
382<pubDate>Thu, 19 Apr 2018 01:58:00 -0500</pubDate>
383</item>
384<item>
385<title>
386Facebook Graph Metadata Crosswalk Mapping Proof Of Concept
387</title>
388<link>https://cxsecurity.com/issue/WLB-2018040153</link>
389<guid>WLB-2018040153</guid>
390<lastBuildDate>2018-04-18 05:17:16 CET</lastBuildDate>
391<dc:creator>Todor Donev</dc:creator>
392<description>
393Topic: Facebook Graph Metadata Crosswalk Mapping Proof Of Concept Risk: Medium Text:#!/usr/bin/perl # # Facebook 'Graph' metadata crosswalk mapping (PoC) # # 2018 Todor Donev < todor.donev at gmail.com> # ...
394</description>
395<pubDate>Wed, 18 Apr 2018 05:17:16 -0500</pubDate>
396</item>
397<item>
398<title>
399Facebook Graph Phone Number Metadata Crosswalk Mapping Proof Of Concept
400</title>
401<link>https://cxsecurity.com/issue/WLB-2018040152</link>
402<guid>WLB-2018040152</guid>
403<lastBuildDate>2018-04-18 05:16:31 CET</lastBuildDate>
404<dc:creator>Todor Donev</dc:creator>
405<description>
406Topic: Facebook Graph Phone Number Metadata Crosswalk Mapping Proof Of Concept Risk: Medium Text:#!/usr/bin/perl # # Facebook 'Graph' Phone Number metadata crosswalk mapping (PoC) # # 2018 Todor Donev < todor.donev at g...
407</description>
408<pubDate>Wed, 18 Apr 2018 05:16:31 -0500</pubDate>
409</item>
410<item>
411<title>
412AMD Plays.tv 1.27.5.0 plays_service.exe Arbitrary File Execution
413</title>
414<link>https://cxsecurity.com/issue/WLB-2018040148</link>
415<guid>WLB-2018040148</guid>
416<lastBuildDate>2018-04-18 05:13:46 CET</lastBuildDate>
417<dc:creator>Securifera</dc:creator>
418<description>
419Topic: AMD Plays.tv 1.27.5.0 plays_service.exe Arbitrary File Execution Risk: Medium Text: # http://support.amd.com/en-us/download?cmpid=CCCOffline - # Click "Automatically Detect - Downlo...
420</description>
421<pubDate>Wed, 18 Apr 2018 05:13:46 -0500</pubDate>
422</item>
423<item>
424<title>
425Microsoft Windows nt!NtQueryAttributesFile Kernel Stack Memory Disclosure
426</title>
427<link>https://cxsecurity.com/issue/WLB-2018040146</link>
428<guid>WLB-2018040146</guid>
429<lastBuildDate>2018-04-18 05:12:15 CET</lastBuildDate>
430<dc:creator>Google Security Research</dc:creator>
431<description>
432Topic: Microsoft Windows nt!NtQueryAttributesFile Kernel Stack Memory Disclosure Risk: Medium Text:/* We have discovered that the nt!NtQueryAttributesFile system call invoked with paths of certain kernel objects discloses uni...
433</description>
434<pubDate>Wed, 18 Apr 2018 05:12:15 -0500</pubDate>
435</item>
436<item>
437<title>
438Microsoft Windows Kernel (Windows 7 x86) Local Privilege Escalation (MS17-017)
439</title>
440<link>https://cxsecurity.com/issue/WLB-2018040144</link>
441<guid>WLB-2018040144</guid>
442<lastBuildDate>2018-04-18 05:11:03 CET</lastBuildDate>
443<dc:creator>xiaodaozhi</dc:creator>
444<description>
445Topic: Microsoft Windows Kernel (Windows 7 x86) Local Privilege Escalation (MS17-017) Risk: Medium Text:#include < Windows.h> #include < wingdi.h> #include < iostream> #include < Psapi.h> #pragma comment(lib, "psapi.lib") #defin...
446</description>
447<pubDate>Wed, 18 Apr 2018 05:11:03 -0500</pubDate>
448</item>
449<item>
450<title>
451Microsoft Windows nt!NtQueryInformationProcess (ProcessImageFileName) Kernel 64-bit Pool/Stack Memory Disclosure
452</title>
453<link>https://cxsecurity.com/issue/WLB-2018040143</link>
454<guid>WLB-2018040143</guid>
455<lastBuildDate>2018-04-18 04:22:57 CET</lastBuildDate>
456<dc:creator>Google Security Research</dc:creator>
457<description>
458Topic: Microsoft Windows nt!NtQueryInformationProcess (ProcessImageFileName) Kernel 64-bit Pool/Stack Memory Disclosure Risk: Medium Text:/* We have discovered that the nt!NtQueryInformationProcess system call invoked with the ProcessImageFileName (0x1B) informati...
459</description>
460<pubDate>Wed, 18 Apr 2018 04:22:57 -0500</pubDate>
461</item>
462<item>
463<title>
464Microsoft Windows nt!NtQueryVirtualMemory (MemoryImageInformation) Kernel 64-bit Stack Memory Disclosure
465</title>
466<link>https://cxsecurity.com/issue/WLB-2018040142</link>
467<guid>WLB-2018040142</guid>
468<lastBuildDate>2018-04-18 04:22:30 CET</lastBuildDate>
469<dc:creator>Google Security Research</dc:creator>
470<description>
471Topic: Microsoft Windows nt!NtQueryVirtualMemory (MemoryImageInformation) Kernel 64-bit Stack Memory Disclosure Risk: Medium Text:/* We have discovered that the nt!NtQueryVirtualMemory system call invoked with the MemoryImageInformation (0x6) information c...
472</description>
473<pubDate>Wed, 18 Apr 2018 04:22:30 -0500</pubDate>
474</item>
475<item>
476<title>
477Microsoft Windows nt!NtQueryInformationTransactionManager (TransactionManagerRecoveryInformation) Kernel Pool Memory Disclosure
478</title>
479<link>https://cxsecurity.com/issue/WLB-2018040141</link>
480<guid>WLB-2018040141</guid>
481<lastBuildDate>2018-04-18 04:22:02 CET</lastBuildDate>
482<dc:creator>Google Security Research</dc:creator>
483<description>
484Topic: Microsoft Windows nt!NtQueryInformationTransactionManager (TransactionManagerRecoveryInformation) Kernel Pool Memory Disclosure Risk: Medium Text:/* We have discovered that the nt!NtQueryInformationTransactionManager system call invoked with the TransactionManagerRecovery...
485</description>
486<pubDate>Wed, 18 Apr 2018 04:22:02 -0500</pubDate>
487</item>
488<item>
489<title>
490Microsoft Windows nt!NtQueryVolumeInformationFile Kernel Stack Memory Disclosure
491</title>
492<link>https://cxsecurity.com/issue/WLB-2018040140</link>
493<guid>WLB-2018040140</guid>
494<lastBuildDate>2018-04-18 04:21:32 CET</lastBuildDate>
495<dc:creator>Google Security Research</dc:creator>
496<description>
497Topic: Microsoft Windows nt!NtQueryVolumeInformationFile Kernel Stack Memory Disclosure Risk: Medium Text:/* We have discovered that the nt!NtQueryVolumeInformationFile system call invoked against certain kernel objects discloses un...
498</description>
499<pubDate>Wed, 18 Apr 2018 04:21:32 -0500</pubDate>
500</item>
501</channel>
502</rss>