Exodus Intel VRT

NEC EXPRESSCLUSTER X Web Manager File Upload Vulnerability

OCTOBER 31, 2021

EIP-d8554689 An arbitrary file upload vulnerability has been found in NEC EXPRESSCLUSTER X. WebManager (clpwebmc.exe) is a webserver tasked with providing remote administrative access, it is configured to utilize port 29003 by default. This...

Read More

NEC EXPRESSCLUSTER X Web Manager Command Execution Vulnerability

OCTOBER 31, 2021

EIP-9eccc486 A remote command execution vulnerability has been found in NEC EXPRESSCLUSTER X. WebManager (clpwebmc.exe) is a webserver tasked with providing remote administrative access, it is configured to utilize port 29003 by default. This...

Read More

NEC EXPRESSCLUSTER X Old API Server 0x1D Stack Overflow Vulnerability

OCTOBER 31, 2021

EIP-2ba7cebd A stack-based buffer overflow has been found in NEC EXPRESSCLUSTER X that can lead to remote arbitrary code execution with full SYSTEM privileges. The Old API Support service (clpoldapi.exe) is the system service...

Read More

NEC EXPRESSCLUSTER X Transaction Server 0x32 Stack Overflow Vulnerability

OCTOBER 31, 2021

EIP-5f2cf48c A stack-based buffer overflow has been found in NEC EXPRESSCLUSTER X that can lead to remote arbitrary code execution with full SYSTEM privileges. The Transaction Server (clptrnsv.exe) is a system service configured to...

Read More

NEC EXPRESSCLUSTER X Transaction Server 0x3A Stack Overflow Vulnerability

OCTOBER 31, 2021

EIP-fba18752 A stack-based buffer overflow has been found in NEC EXPRESSCLUSTER X that can lead to remote arbitrary code execution with full SYSTEM privileges. The Transaction Server (clptrnsv.exe) is a system service configured to...

Read More

NEC EXPRESSCLUSTER X Disk Agent 0x104 Stack Overflow Vulnerability

OCTOBER 31, 2021

EIP-8b0cfb43 A stack-based buffer overflow has been found in NEC EXPRESSCLUSTER X that can lead to remote arbitrary code execution with full SYSTEM privileges. The Disk Agent (clpdiskagent.exe) is the component that is tasked...

Read More

NEC EXPRESSCLUSTER X Disk Agent 0x103 Stack Overflow Vulnerability

OCTOBER 31, 2021

EIP-ff1ca610 A stack-based buffer overflow has been found in NEC EXPRESSCLUSTER X that can lead to remote arbitrary code execution with full SYSTEM privileges. The Disk Agent (clpdiskagent.exe) is the component that is tasked...

Read More

Analysis of a Heap Buffer-Overflow Vulnerability in Adobe Acrobat Reader DC

OCTOBER 4, 2021

By Sergi Martinez In late June, we published a blog post containing analysis of exploitation of a heap-buffer overflow vulnerability in Adobe Reader, a vulnerability that we thought corresponded to CVE-2021-21017. The starting point...

Read More

SolarWinds Serv-u File Server Command Injection Vulnerability

SEPTEMBER 27, 2021

EIP-d3400c52 The Serv-U File Server supports site specific commands which may not be universally supported by all FTP clients. Among these is the SITE EXEC command which allows a user to execute programs and scripts...

Read More

McAfee DLP Agent Stack Buffer Overflow Remote Code Execution Vulnerability

SEPTEMBER 17, 2021

EIP-035220ca The vulnerability affects both Data Loss Prevention (DLP) Endpoint for Windows and the DLP Discover products from McAfee. The vulnerability is present within the included lasr.dll module, which is part of the Keyview SDK3...

Read More