Posts Tagged ‘arbitrary’

Unrar VMSF_DELTA Arbitrary Memory Write

It appears that the VMSF_DELTA memory corruption that was reported to Sophos AV in 2012 (and fixed there) was actually inherited from upstream unrar. For unknown reasons, whoever fixed the bug did not report this to upstream unrar, and the bug seems to have persisted there to this day. Source: Unrar VMSF_DELTA Arbitrary Memory Write


Samba is_known_pipename() Arbitrary Module Load

This Metasploit module triggers an arbitrary shared library load vulnerability in Samba versions 3.5.0 to 4.4.14, 4.5.10, and 4.6.4. This Metasploit module requires valid credentials, a writeable folder in an accessible share, and knowledge of the server-side path of the writeable folder. In some cases, anonymous access combined with common filesystem locations can be used […]


BuilderEngine Arbitrary File Upload / Execution

This Metasploit module exploits a vulnerability found in BuilderEngine 3.5.0 via elFinder 2.0. The jquery-file-upload plugin can be abused to upload a malicious file, which would result in arbitrary remote code execution under the context of the web server. Source: BuilderEngine Arbitrary File Upload / Execution