CVE-2016-3000
published 2016-09-26CVE-2016-3000: The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service…
PriorityP417medium4.3CVSS 3.0
AVNACLPRLUINSUCNINAL
EPSS
1.27%
66.3th percentile
The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service (service degradation) via a crafted URL.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | connections | — | — |
| ibm | connections | — | — |
| ibm | connections | — | — |
| ibm | connections | — | — |
CVSS provenance
nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
vendor_cisco10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w8px-hm42-g43j: The help service in IBM Connections 4
ghsa_unreviewed·2022-05-17
CVE-2016-3000 [MEDIUM] CWE-20 GHSA-w8px-hm42-g43j: The help service in IBM Connections 4
The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service (service degradation) via a crafted URL.
Cisco
Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
vendor_cisco·2016-03-03·CVSS 10.0
CVE-2016-1329 [CRITICAL] CWE-287 Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
A vulnerability in Cisco NX-OS Software running on Cisco Nexus 3000 Series Switches and Cisco Nexus 3500 Platform Switches could allow an unauthenticated, remote attacker to log in to the device with the privileges of the root user with bash shell access.
The vulnerability is due to a user account that has a default and static password. This account is created at installation and cannot be changed or deleted without impacting the functionality of the system. An attacker could exploit this vulnerability by connecting to the affected system using this default account. The account can be used to authenticate remotely to the device via Telnet (or SSH on a specific release) and locally on the serial
Cisco
Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
vendor_cisco
CVE-2016-1329 Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
CVE-2016-1329: Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
A vulnerability in Cisco NX-OS Software running on Cisco Nexus 3000 Series Switches and Cisco Nexus 3500 Platform Switches could allow an unauthenticated, remote attacker to log in to the device with the privileges of the root user with bash shell access. The vulnerability is due to a user account that has a default and static password. This account is created at installation and cannot be changed or deleted without impacting the functionality of the system. An attacker could exploit this vulnerability by connecting to the affected system using this default account. The account can be used to authenticate remotely to the device via Telnet (or SSH on a specific release) and locally o
No detection rules found.
Exploit-DB
Apple Intel HD 3000 Graphics Driver 10.0.0 - Local Privilege Escalation
exploitdb·2016-04-08·CVSS 7.8
CVE-2016-1743 [HIGH] Apple Intel HD 3000 Graphics Driver 10.0.0 - Local Privilege Escalation
Apple Intel HD 3000 Graphics Driver 10.0.0 - Local Privilege Escalation
---
/*
░▀█▀░█▀█░█░░░█▀█░█▀▀░░░█░█░█░█░█░░░█▀█░█▀▄░█▀▀░█░█░
░░█░░█▀█░█░░░█░█░▀▀█░░░▀▄▀░█░█░█░░░█░█░█░█░█▀▀░▀▄▀░
░░▀░░▀░▀░▀▀▀░▀▀▀░▀▀▀░░░░▀░░▀▀▀░▀▀▀░▀░▀░▀▀░░▀▀▀░░▀░░
T A L O S V U L N D E V
Proof-of-Concept Exploit
Advisory: http://www.talosintel.com/reports/TALOS-2016-0088/
Snort rules: 37517, 37518
CVE-2016-1743
Author: Piotr Bania, Cisco Talos
Target: Apple Intel HD 3000 Graphics driver
Impact: Local Privilege Escalation (root)
Tested Configuration:
Apple Intel HD 3000 Graphics driver 10.0.0
Darwin Kernel Version 15.2.0
OSX 10.11.2
Compilation:
gcc TALOS-2016-0088_poc.c lsym.m -o TALOS-2016-0088_poc -framework IOKit -framework Foundation -m32 -Wl,-pagezero_size,0 -O3
kudos:
qwertyoruiop (i've grabbed the lsym t
Exploit-DB
Zortam Mp3 Media Studio 20.15 - Overflow (PoC) (SEH)
exploitdb·2016-03-14
Zortam Mp3 Media Studio 20.15 - Overflow (PoC) (SEH)
Zortam Mp3 Media Studio 20.15 - Overflow (PoC) (SEH)
---
#-*- coding: utf-8 -*-
#
# Exploit Title : Zortam Mp3 Media Studio 20.15 - SEH overflow DOS
# Date: 2016-03-12
# Author: INSECT.B
# Facebook : https://www.facebook.com/B.INSECT00
# GitHub : binsect00
# Blog : http://binsect00.tistory.com
# Vendor Homepage : http://www.zortam.com
# Software Link: http://www.zortam.com/download.html
# Version: 20.15
# Tested on: Windows7 Professional SP1 En x86
# CVE : N/A
#
# Detail..
# 1. Zortam Mp3 Media Studio is program that change tags sound file
# 2. If tag length over certain length, program is occured crash.
# 3. Make mp3 file. title tag length is 3000.
# 4. program open. and serching Directory
id3Id = '\x49\x44\x33' #ID3
id3Version = '\x03\x00'
id3Flag = '\x00'
id3Siz
No writeups or analysis indexed.
http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962http://www.securityfocus.com/bid/93166https://www-01.ibm.com/support/docview.wss?uid=swg21989067http://www-01.ibm.com/support/docview.wss?uid=swg1LO89962http://www.securityfocus.com/bid/93166https://www-01.ibm.com/support/docview.wss?uid=swg21989067
2016-09-26
Published