Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Pedro Lauridsen Ribeiro
Re: CVE Request: heap buffer overflow in gdk-pixbuf
Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev oss-sec mailing list archives From: Pedro Ribeiro <pedrib () gmail com> Date: Mon, 25 Jul 2022 12:15:40 +0700 On 24/07/2022 10:35, Pedro Ribeiro wrote: Actually I was wrong, this doesn't crash Chromium! But it still crashes with a heap buffer overflow in GNOME file explorer and GNOME image viewers (anything using gdk-pixbuf really) as said in the previous email though.
Re: CVE Request: heap buffer overflow in gdk-pixbuf
Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev oss-sec mailing list archives From: Pedro Ribeiro <pedrib () gmail com> Date: Sun, 24 Jul 2022 10:35:04 +0700 Hi John, Thanks for the info, will request via the form and post here again once I have a CVE number. In any case I hope this post is useful to raise awareness of the issue to distro maintainers.
Re: CVE Request: heap buffer overflow in gdk-pixbuf
Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev oss-sec mailing list archives From: John Helmert III <ajak () gentoo org> Date: Sat, 23 Jul 2022 11:51:53 -0500 On Sat, Jul 23, 2022 at 07:35:42PM +0700, Pedro Ribeiro wrote: Hi, according to the oss-security Openwall wiki page [1], CVEs need to be requested via MITRE's web form [2].
CVE Request: heap buffer overflow in gdk-pixbuf
Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev oss-sec mailing list archives From: Pedro Ribeiro <pedrib () gmail com> Date: Sat, 23 Jul 2022 19:35:42 +0700 Hi, A year ago I found and submitted a vulnerability to the gdk-pixbuf tracker: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/190 It's a heap buffer overflow using a crafted GIF, which is likely exploitable in 32 bit systems. Full details are in the link above in the bug tracker.
Multiple 0days in IBM Data Risk Manager
Full Disclosure mailing list archives By Date By Thread Multiple 0days in IBM Data Risk Manager From: Pedro Ribeiro <pedrib () gmail com> Date: Wed, 29 Apr 2020 20:30:47 +0700 Hi, I recently attempted to disclose some vulns to IBM via CERT/CC. They refused to accept the report, saying they only accept reports from paying customers...
Multiple 0 day vulnerabilities in IBM Data Risk Manager
Full Disclosure mailing list archives By Date By Thread Multiple 0 day vulnerabilities in IBM Data Risk Manager From: Pedro Ribeiro <pedrib () gmail com> Date: Tue, 21 Apr 2020 21:25:59 +0700 Hi, I recently attempted to disclose some vulns to IBM via CERT/CC. They refused to accept the report, saying they only accept reports from paying customers...
Full Disclosure: CVE-2019-4716: conf overwrite + auth bypass = rce as root
Full Disclosure mailing list archives By Date By Thread CVE-2019-4716: conf overwrite + auth bypass = rce as root / SYSTEM on IBM PA / TM1 From: Pedro Ribeiro <pedrib () gmail com> Date: Fri, 27 Mar 2020 14:51:29 +0700 Hi, Here's a fun one I have been working on for some time. tl;dr IBM PA / TM1, dating back to 2014, maybe 2009 is vulnerable to a unauthenticated configuration overwrite; this is abused to "fake authenticate" to it, and finally execute code as root / SYSTEM using TM1 scripting.
from unauth remote access to code execution as root
Full Disclosure mailing list archives By Date By Thread Multiple vulns in Cisco UCS Director: from unauth remote access to code execution as root From: Pedro Ribeiro <pedrib () gmail com> Date: Wed, 28 Aug 2019 11:06:40 +0700 Hi, tl;dr three vulns (auth bypass, command injection, default password) in Cisco UCS and Cisco IMC Supervisor, two of which (auth bypass + command injection) can be chained to achieve unauthenticated RCE as root Full advisory below, can also be fetched from...
from unauth remote access to code execution as root
Bugtraq mailing list archives By Date By Thread Multiple vulns in Cisco UCS Director: from unauth remote access to code execution as root From: Pedro Ribeiro <pedrib () gmail com> Date: Wed, 28 Aug 2019 11:06:40 +0700 Hi, tl;dr three vulns (auth bypass, command injection, default password) in Cisco UCS and Cisco IMC Supervisor, two of which (auth bypass + command injection) can be chained to achieve unauthenticated RCE as root Full advisory below, can also be fetched from...
Cisco Data Center Manager multiple vulns; RCE as root
Full Disclosure mailing list archives By Date By Thread Cisco Data Center Manager multiple vulns; RCE as root From: Pedro Ribeiro <pedrib () gmail com> Date: Sat, 6 Jul 2019 16:04:47 +0100 Hi, tl;dr Cisco Data Center Network Manager has multiple vulns which can be abused to achieve RCE as root with no authentication. Full advisory below, and Metasploit modules have been submitted to the project. A special thanks to iDefense for handling the disclosure process with Cisco.
Cisco Data Center Manager multiple vulns; RCE as root
Bugtraq mailing list archives By Date By Thread Cisco Data Center Manager multiple vulns; RCE as root From: Pedro Ribeiro <pedrib () gmail com> Date: Sat, 6 Jul 2019 16:04:47 +0100 Hi, tl;dr Cisco Data Center Network Manager has multiple vulns which can be abused to achieve RCE as root with no authentication. Full advisory below, and Metasploit modules have been submitted to the project. A special thanks to iDefense for handling the disclosure process with Cisco.
Full Disclosure: [Multiple CVE]
Full Disclosure mailing list archives By Date By Thread [Multiple CVE] - Cisco Identity Services Engine unauth stored XSS to RCE as root From: Pedro Ribeiro <pedrib () gmail com> Date: Tue, 5 Feb 2019 10:18:19 +0700 Hi, On January 20th, SSD disclosed 3 vulnerabilities found by Agile Information Security in their Cisco Identity Services Engine (ISE) product.
Cisco Identity Services Engine unauth stored XSS to RCE as root
Bugtraq mailing list archives By Date By Thread [Multiple CVE] - Cisco Identity Services Engine unauth stored XSS to RCE as root From: Pedro Ribeiro <pedrib () gmail com> Date: Tue, 5 Feb 2019 10:18:19 +0700 Hi, On January 20th, SSD disclosed 3 vulnerabilities found by Agile Information Security in their Cisco Identity Services Engine (ISE) product.
Full Disclosure: [Several CVE]: NUUO CMS
Full Disclosure mailing list archives By Date By Thread [Several CVE]: NUUO CMS - multiple vulnerabilities resulting in unauth RCE From: Pedro Ribeiro <pedrib () gmail com> Date: Mon, 21 Jan 2019 17:29:36 +0700 Hi, In October 2018, ICS-CERT issued an advisory for Nuuo CMS: https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02 Long story short, Nuuo CMS contained several vulnerabilities that allow an unauthenticated attacker (up to version 2.3) or an authenticated attacker (up to version 3.5)...
Bugtraq: [Several CVE]: NUUO CMS
Bugtraq mailing list archives By Date By Thread [Several CVE]: NUUO CMS - multiple vulnerabilities resulting in unauth RCE From: Pedro Ribeiro <pedrib () gmail com> Date: Mon, 21 Jan 2019 17:29:36 +0700 Hi, In October 2018, ICS-CERT issued an advisory for Nuuo CMS: https://ics-cert.us-cert.gov/advisories/ICSA-18-284-02 Long story short, Nuuo CMS contained several vulnerabilities that allow an unauthenticated attacker (up to version 2.3) or an authenticated attacker (up to version 3.5) to...
[CVE-2018-15379] Unauth RCE as root in Cisco Prime Infrastructure
From: Pedro Ribeiro Date: Mon, 8 Oct 2018 12:24:03 +0700 Hi, Here's a quick and easy unauth RCE as root in Cisco Prime Infrastructure. This is a product widely deployed in data centers for router management... good luck. Thanks to Beyond Security SSD programme for helping me disclose this to Cisco.
[CVE-2018-1418] IBM QRadar SIEM unauthenticated remote code execution as root
From: Pedro Ribeiro Date: Mon, 28 May 2018 15:00:52 +0100 Hi all, 3 vulns in IBM QRadar SIEM that when chained allow an attacker to achieve unauthenticated RCE as root on the QRadar host. IBM have only attributed on CVE for all 3 vulns, and they have a combined CVSS score of 5.6. So totally own a SIEM = 5.6 CVSS. Sounds right to me. A special thanks to Beyond Security's SSD programme, which helped me disclose these 3 vulnerabilities.
DrayTek Vigor ACS 2 Java Deserialisation RCE
From: Pedro Ribeiro Date: Thu, 19 Apr 2018 16:12:09 +0700 Hi all, tl;dr DrayTek Vigor ACS server, a remote enterprise management system for DrayTek routers, uses a vulnerable version of the Adobe / Apache Flex Java library that has a deserialisation vulnerability.
RCE and admin cred disclosure in BMC Track-It! 11.4
From: Pedro Ribeiro Date: Fri, 26 Jan 2018 15:27:00 +0700 Happy new year! I was doing some new year cleaning and realised I never released this advisory properly. Two vulnerabilities in BMC Track-It! 11.4 which were disclosed by SecuriTeam Secure Disclosure on July 2016. Posting here because I've seen quite a few of these still in active use, live and deployed in corporate networks. The exploit is available in my repo at [3].
Full Disclosure: Re: [FD] SSD Advisory
SSD Advisory - Hack2Win - Asus Unauthenticated LAN Remote Command Execution Full report:https://blogs.securiteam.com/index.php/archives/3589 Twitter: @SecuriTeam_SSD Weibo: SecuriTeam_SSD Vulnerabilities Summary The following advisory describes two (2) vulnerabilities found in AsusWRT Version 3.0.0.4.380.7743. The combination of the vulnerabilities leads to LAN remote command execution on any Asus router.
Full Disclosure: Multiple RCE in ZyXEL
From: Pedro Ribeiro Date: Mon, 16 Jan 2017 10:46:45 +0000 Hi, TrueOnline is a Thai ISP that distributes customised versions of ZyXEL and Billion routers - customised with vulnerabilities that is. The routers contain several default administrative accounts and command injections that can be abused by authenticated and unauthenticated attackers.
[0-day] RCE and admin credential disclosure in NETGEAR WNR2000
From: Pedro Ribeiro Date: Mon, 30 Jan 2017 10:00:57 +0000 An update on this post: MITRE has provided me with CVE numbers. CVE-2016-10175 for #1 (information disclosure) CVE-2016-10176 for #2 (improper access control) CVE-2016-10174 for #3 (stack buffer overflow) In addition, NETGEAR has recognised the flaw and released beta firmware that is supposed to fix this vulnerability. This claim was NOT verified.
[0-day] RCE and admin credential disclosure in NETGEAR WNR2000
From: Pedro Ribeiro Date: Tue, 20 Dec 2016 22:42:03 +0100 Hi, tl;dr RCE in NETGEAR WNR2000 routers, exploitable over the LAN by default or over the WAN if remote administration is enabled. 10.000 devices affected show up in Shodan - these are the ones with remote admin enabled. There are likely tens of thousands of vulnerable routers in private LANs as this device is extremely popular. As usual, NETGEAR did not respond to any of my emails, so I'm releasing this advisory and exploit code as a 0-day.
Multiple remote vulnerabilities (RCE, bof) in Nuuo NVR and NETGEAR Surveillance
From: Pedro Ribeiro Date: Thu, 4 Aug 2016 17:46:10 +0100 tl;dr Lots of RCE, hardcoded credentials, stack buffer overflow and information disclosure in the Nuuo NVRmini and other network video recorders of the same vendor. These vulnerabilities also affect the NETGEAR Surveillance app (which can be installed on the NETGEAR ReadyNAS). See the full advisory including PoC and exploits below, or at my github (https://raw.githubusercontent.com/pedrib/PoC/master/advisories/nuuo-nvr-vulns.txt).
Multiple remote vulnerabilities (RCE, bof) in Nuuo NVR and NETGEAR Surveillance
From: Pedro Ribeiro Date: Thu, 4 Aug 2016 17:47:42 +0100 tl;dr Lots of RCE, hardcoded credentials, stack buffer overflow and information disclosure in the Nuuo NVRmini and other network video recorders of the same vendor. These vulnerabilities also affect the NETGEAR Surveillance app (which can be installed on the NETGEAR ReadyNAS). See the full advisory including PoC and exploits below, or at my github (https://raw.githubusercontent.com/pedrib/PoC/master/advisories/nuuo-nvr-vulns.txt).
Multiple remote vulnerabilities (RCE, bof) in Nuuo NVR and NETGEAR Surveillance
From: Pedro Ribeiro Date: Thu, 4 Aug 2016 17:47:42 +0100 tl;dr Lots of RCE, hardcoded credentials, stack buffer overflow and information disclosure in the Nuuo NVRmini and other network video recorders of the same vendor. These vulnerabilities also affect the NETGEAR Surveillance app (which can be installed on the NETGEAR ReadyNAS). See the full advisory including PoC and exploits below, or at my github (https://raw.githubusercontent.com/pedrib/PoC/master/advisories/nuuo-nvr-vulns.txt).
Multiple remote vulnerabilities (RCE, bof) in Nuuo NVR and NETGEAR Surveillance
From: Pedro Ribeiro Date: Thu, 4 Aug 2016 17:46:10 +0100 tl;dr Lots of RCE, hardcoded credentials, stack buffer overflow and information disclosure in the Nuuo NVRmini and other network video recorders of the same vendor. These vulnerabilities also affect the NETGEAR Surveillance app (which can be installed on the NETGEAR ReadyNAS). See the full advisory including PoC and exploits below, or at my github (https://raw.githubusercontent.com/pedrib/PoC/master/advisories/nuuo-nvr-vulns.txt).
Ibope coloca Greca na frente à Prefeitura de Curitiba
O ex-prefeito Rafael Greca (PMN) lidera a primeira pesquisa de intenção de voto medida pelo Ibope em Curitiba. Greca lidera com 21%, seguido do atual prefeito Gustavo Fruet (PDT) com 18% e Requião Filho (PMDB) com 16%. Ney Leprevost (PSD) é citado por 5% dos entrevistados, Tadeu Veneri (PT), Luciano Pizzatto (PRTB) e Maria Victória (PP) apresentam o mesmo percentual (3%), enquanto Paulo Martins (PSDB) obtém 2% das intenções.
Candidatos à presidência da Câmara são todos fichas sujas
Embora os favoritos para a disputada da presidência da Câmara dos Deputados ainda não tenham formulado as suas candidaturas, levantamento feito pelo Estadão nos leva a lugar nenhum. De acordo com o Estadão, dos seis candidatos favoritos à sucessão do deputado afastado Eduardo Cunha (PMDB-RJ) na presidência da Câmara, quatro enfrentam algum tipo de processo judicial, um foi citado na Operação Lava Jato e o sexto não responde mais a ações porque os crimes dos quais era acusado prescreveram.
VU#677427]: Dlink DIR routers HNAP Login stack buffer overflow
From: Pedro Ribeiro Date: Mon, 7 Nov 2016 18:58:54 +0100 tl;dr A stack bof in several Dlink routers, which can be exploited by an unauthenticated attacker in the LAN. There is no patch as Dlink did not respond to CERT's requests. As usual, a Metasploit module is in the queue (see [9] below) and should hopefully be integrated soon. The interesting thing about this vulnerability is that it affects both ARM and MIPS devices, so exploitation is slightly different for each type.
VU#677427]: Dlink DIR routers HNAP Login stack buffer overflow
From: Pedro Ribeiro Date: Mon, 7 Nov 2016 18:58:54 +0100 tl;dr A stack bof in several Dlink routers, which can be exploited by an unauthenticated attacker in the LAN. There is no patch as Dlink did not respond to CERT's requests. As usual, a Metasploit module is in the queue (see [9] below) and should hopefully be integrated soon. The interesting thing about this vulnerability is that it affects both ARM and MIPS devices, so exploitation is slightly different for each type.
A crise e o melhor está por vir
A crise e o melhor está por vir Publicado: 9, julho 2016 ás 19:31 Postado por: Pedro Ribeiro O CHEFE DA CASA CIVIL VALDIR ROSSONE EM ENTREVISTA SOBRE A LDO. — Pedro Ribeiro –Valdir Rossoni chegou há pouco tempo no Palácio Iguaçu, onde assumiu a chefia da Casa Civil e vem falando grosso. Como porta-voz oficial do governo, não cansa de repetir que o Estado está em crise e que é preciso união de todos para reverter o quadro.
Serráglio e Giacobo disputam presidência da Câmara Federal
Com a saída de Eduardo Cunha da presidência da Câmara dos Deputados, dois paranaenses, Osmar Serraglio, que hoje é relator do processo de cassação de Cunha no Conselho de Ética, e Giacobo que é o terceiro na sucessão. O presidente interino, Waldir Maranhão deverá marcar eleições para a próxima semana. O deputado federal Fernando Lucio Giacobo (PL-PR) ficou conhecido no país por ter ganho R$ 134 mil em 12 vitórias em prêmios diversos da Caixa num período de apenas 14 dias, em junho de 1997.
Turismo em Foz supera todos os recordes
A 11ª edição do Festival Internacional de Turismo das Cataratas, em Foz do Iguaçu, foi um sucesso e superou todos os recordes de participantes, com maior público, número de estandes e expositores. “Foi uma demonstração inequívoca da força do Destino Iguaçu para superação da crise pela qual passa a economia brasileira”, avaliou Gilmar Piolla, superintendente de Comunicação Social de Itaipu e vice-presidente do Fundo Iguaçu. A Itaipu é patrocinadora máster do evento.
O melhor da indústria gráfica
O que de melhor o Paraná produziu no último ano em relação a produtos gráficos será conhecido nesta sexta-feira (24) na entrega do 14º Prêmio Paranaense de Excelência Gráfica Oscar Schrappe Sobrinho, uma das principais premiações do setor no Brasil.
Pré-candidato do PHS aposta em mudanças a partir da sociedade
Pré-candidato do PHS aposta em mudanças a partir da sociedade Publicado: 24, junho 2016 ás 7:20 Postado por: Pedro Ribeiro Pré-candidato à Prefeitura de Curitiba pelo Partido Humanista da Solidariedade (PSH), o técnico em contabilidade André Augusto da Luz pauta suas ações nas pessoas. Em entrevista ao Paraná Portal, dentro da série “Eleições 2016 – Curitiba” o pré-candidato aposta na mobilização popular e em acordos com outros partidos para comandar a prefeitura.
Para Venéri, PT aumentou número de novos filiados e conta com 30% do eleitorado curitibano
Para Venéri, PT aumentou número de novos filiados e conta com 30% do eleitorado curitibano Publicado: 10, junho 2016 ás 12:36 Postado por: Pedro Ribeiro O deputado estadual, Tadeu Venéri (PT), pré-candidato do partido à Prefeitura de Curitiba, disse ao Paraná Portal que os últimos acontecimentos na política nacional, que resultou no afastamento temporário da presidente Dilma Rousseff, poderá influenciar nas campanhas para prefeituras.
Circocan estreia espetáculo com linguagem coletiva e contemporânea
Em junho, o Circocan estreia seu novo espetáculo, SOMOS, com apresentações em Florianópolis e Curitiba. A produção é fruto do projeto de formação promovido pela companhia em Florianópolis, premiado pela Funarte através do Prêmio Carequinha, e foca no desenvolvimento do circo contemporâneo, linguagem ainda pouco explorada no Brasil. SOMOS é resultado de 6 meses de dedicação do Grupo de Formação em Circo, programa de treinamento e qualificação profissional que reúne artistas de todo o Brasil.
Guaratuba, a primeira cidade inteligente do Brasil
Em Guaratuba, a partir de agora, se uma lâmpada da iluminação pública estiver queimada, piscando ou acesa durante o dia, ela será automaticamente regulada através do gerenciamento de sistema tecnológico dentro do conceito de cidade inteligente, instalado pela empresa SmartGreen. Na esteira dessa rede, que controla o sistema de iluminação, está, também, o controle do consumo de água e energia, o que poderá baratear o custo em até 50% para o poder público municipal.
Richa perde, ganha o PMDB na Itaipu
Richa perde, ganha o PMDB na Itaipu Publicado: 3, junho 2016 ás 10:07 Postado por: Pedro Ribeiro Bem que o governador Beto Richa tentou, mas não conseguiu emplacar o ex-deputado federal, Abelardo Lupion, na diretoria-geral da Itaipu Binacional. Richa também virou as costas para um aliado do Palácio Iguaçu, Eduardo Sciarra, do PSD, que teria pedido ao próprio governador Para interferir junto ao presidente Michel Temer por seu nome.
Leprevost aponta segurança e saúde como principais problemas de Curitiba
Leprevost aponta segurança e saúde como principais problemas de Curitiba Publicado: 1, junho 2016 ás 11:20 Postado por: Pedro Ribeiro O pré-candidato à Prefeitura de Curitiba pelo PSD, deputado Ney Leprevost, pontuou, em entrevista ao Paraná Portal no quadro “Eleições 2016 – Curitiba” os principais problemas que, se eleito, deverá enfrentar para administrar a cidade.
Del Claro - Coral e Orquestra - arranca suspiros em Curitiba
Diferenciado e inovador, o Del Chiaro – Coral e Orquestra, traz para Curitiba, produtos exclusivos, como formações variadas de Coral e Orquestra com até 80 músicos, Cortejo de Violino para daminhas e cantores solistas de alto nível para cerimônias religiosas. “Além disso também oferecemos Trio ou Quarteto de Jazz para coquetéis ou recepções de convidados de festas de casamento.
Bugtraq: [CVE-2016-6600/1/2/3]: Multiple vulnerabilities (RCE, file download, etc) in WebNMS Framework 5.2
From: Pedro Ribeiro Date: Mon, 8 Aug 2016 22:40:37 +0100 tl;dr RCE, file download, weak encryption and user impersonation, all of which can be exploited by an unauthenticated attacker in WebNMS Framework 5.2 and 5.2 SP1. A special thanks to Beyond Security and their SSD program, which helped disclose the vulnerabilities.
Full Disclosure: [CVE-2016-6600/1/2/3]: Multiple vulnerabilities (RCE, file download, etc) in WebNMS Framework 5.2
From: Pedro Ribeiro Date: Mon, 8 Aug 2016 22:40:37 +0100 tl;dr RCE, file download, weak encryption and user impersonation, all of which can be exploited by an unauthenticated attacker in WebNMS Framework 5.2 and 5.2 SP1. A special thanks to Beyond Security and their SSD program, which helped disclose the vulnerabilities.
RCE, info disclosure, HQL injection and stored XSS in Novell Service Desk 7.1.0
From: Pedro Ribeiro Date: Sun, 10 Apr 2016 23:23:26 +0100 Hi, Novell Service Desk (now rebranded as Micro Focus Service Desk) 7.1.0 and below has a number of critical vulnerabilities that allow remote code execution, information disclosure, etc, by authenticated users. Check the full advisory below for details. Novell / Micro Focus have documented these vulnerabilities on their website at [1], [2], [3] and [4] (see the References part at the bottom of the advisory).
CVE-2016-1524/5]: RCE and file download in Netgear NMS300
From: Pedro Ribeiro Date: Thu, 4 Feb 2016 08:04:01 +0800 Hi, CERT/CC has helped me disclose two vulnerabilities in NETGEAR's Pro"safe" Network Management System 300 [1]. Two classical bugs: one remote code execution via arbitrary file upload and an authenticated arbitrary file download. The full advisory can be seen in my repo at [2] and it is also pasted below. I've also released two Metasploit modules to exploit these vulnerabilities [3][4].
Full Disclosure: [CERT 777024
From: Pedro Ribeiro Date: Thu, 4 Feb 2016 08:04:01 +0800 Hi, CERT/CC has helped me disclose two vulnerabilities in NETGEAR's Pro"safe" Network Management System 300 [1]. Two classical bugs: one remote code execution via arbitrary file upload and an authenticated arbitrary file download. The full advisory can be seen in my repo at [2] and it is also pasted below. I've also released two Metasploit modules to exploit these vulnerabilities [3][4].
Remote privesc and RCE in Kaseya Virtual System Administrator
From: Pedro Ribeiro Date: Tue, 29 Sep 2015 12:00:15 +0100 Hi, I have found 3 vulnerabilities in Kaseya's flagship product: - unauthenticated remote code execution (CVE-2015-6922 / ZDI-15-449) - unauthenticated remote privilege escalation (CVE-2015-6922 / ZDI-15-448) - authenticated remote code execution (CVE-2015-6589 / ZDI-15-450) Kaseya VSA is an IT management platform for small and medium corporates. From its console you can control thousands of computers and mobile devices.
[ZDI-15-396] ManageEngine ServiceDesk Plus remote code execution
From: Pedro Ribeiro Date: Fri, 02 Oct 2015 16:08:40 +0100 Hi, Yet another RCE bug in ManageEngine ServiceDesk. This was disclosed by ZDI under ID ZDI-15-396 on August 20th, and fixed in version 9103 [1]. Details below, full advisory can be obtained from my repo at [E2]. A Metasploit module that exploits this vulnerability has been submitted upstream in [E3].
Bugtraq: Re: Windows Platform Binary Table (WPBT)
"Kevin Beaumont" wrote: [...] Microsoft documented a feature in Windows 8 and above called Windows Platform Binary Table.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Pedro Lauridsen
Contact Pedro Lauridsen, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack