Exodus Intel VRT

ZyXEL Armor Cross-Site Request Forgery Vulnerability

FEBRUARY 22, 2022

EIP-521a3b40 A cross-site request forgery vulnerability exists within the ZyXEL Armor Z1 AC2350 and Z2 AC2600 series. Exploitation of the vulnerability allows for attackers to run arbitrary commands on vulnerable versions of the firmware...

Read More

ZyXEL Armor Photobak Command Injection Vulnerability

FEBRUARY 22, 2022

EIP-c624ba9f A command-injection vulnerability exists within the ZyXEL Armor Z1 AC2350 series. The vulnerable endpoint is within the ‘photobak’ component found in the cgi-bin. Exploitation of the vulnerability allows for remote unauthenticated attackers to...

Read More

Zlibc Environment Variable Handling Local Privilege Escalation Vulnerability

FEBRUARY 2, 2022

EIP-1a8a439f A vulnerability exists in Zlibc that allows a local attacker to execute arbitrary code with elevated privileges through manipulation of the LD_ZLIB_CONFFILE and LD_ZLIB_UNCOMPRESSOR environment variables when calling setuid binaries. Vulnerability Identifiers Exodus...

Read More

Arris SURFboard SSDP Command Injection Vulnerability

FEBRUARY 2, 2022

EIP-55f127ea A vulnerability exists within Arris SURFboard’s handling of Simple Service Discovery Protocol (SSDP) messages. A specially crafted NOTIFY message with a LOCATION header can result in a command injection under the context of...

Read More

LiveAction LiveNX AWS Credential Disclosure Vulnerability

JANUARY 19, 2022

EIP-7d4ec9e3 Several versions of LiveAction LiveNX network monitoring software contain Amazon Web Services (AWS) credentials. These credentials have privileged access to the LiveAction AWS infrastructure. A remote attacker may abuse these credentials to gain access...

Read More

UltraVNC Viewer VNC client RFB SolidColor Arbitrary Write Vulnerability

DECEMBER 16, 2021

EIP-0e1ca3ec A vulnerability exists within UltraVNC’s “vncviewer.exe” client. A malicious server can trigger an arbitrary memory write condition through a flaw in the function ClientConnection::SolidColor while drawing pixel data to the screen. An attacker...

Read More

UltraVNC Viewer VNC client RFB rfbServerInitMsg Heap Overflow Vulnerability

DECEMBER 16, 2021

EIP-0e1ca3ec A vulnerability exists within UltraVNC’s “vncviewer.exe” client. Specifically a malicious server may write arbitrary data to arbitrary memory locations through the  in the “rfbServerInitMsg” function upon parsing a long ‘nameLength’ field returned from...

Read More

UltraVNC Viewer VNC client RFB ReadUltraRect Heap Overflow Vulnerability

DECEMBER 16, 2021

EIP-930b0ea5 A vulnerability exists within UltraVNC’s “vncviewer.exe” client. Specifically a heap overflow can be triggered in the “ClientConnection::ReadUltraRect” function upon decompression of malicious formatted data returned from a nefarious server. An attacker can leverage...

Read More

UltraVNC Viewer VNC client Remote Memory Leak Vulnerability

DECEMBER 2, 2021

EIP-5182fb5b A vulnerability exists within UltraVNC view due to a lack of proper stack memory buffer cleanup before constructing the ‘rfbTextChat’ message, which results in a leak of 3-bytes of stack memory. An attacker...

Read More

NEC EXPRESSCLUSTER X Transaction Server 0x32 File Read Vulnerability

OCTOBER 31, 2021

EIP-852fe633 An arbitrary file read vulnerability has been found in NEC EXPRESSCLUSTER X that can allow an attacker to read files off the target system. The Transaction Server (clptrnsv.exe) is a system service configured...

Read More