Alexandre Adamski

9 exploits Active since Jun 2017
CVE-2023-27326 NOMISEC HIGH WORKING POC
Parallels Desktop < 18.1.1 (53328) - Local Privilege Escalation via Toolgate Directory Traversal
Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the current user on the host system. . Was ZDI-CAN-18933.
172 stars
CVSS 8.2
CVE-2023-27326 NOMISEC HIGH WORKING POC
Parallels Desktop < 18.1.1 (53328) - Local Privilege Escalation via Toolgate Directory Traversal
Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the current user on the host system. . Was ZDI-CAN-18933.
37 stars
CVSS 8.2
CVE-2017-9749 EXPLOITDB HIGH text WORKING POC
GNU Binutils - Buffer Overflow in bfin-dis.c *regs* Macros
The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS 7.8
CVE-2017-9746 EXPLOITDB HIGH text WORKING POC
GNU Binutils - Buffer Overflow in objdump Disassemble Function
The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during "objdump -D" execution.
CVSS 7.8
CVE-2017-9756 EXPLOITDB HIGH text WORKING POC
GNU Binutils 2.28 - Buffer Overflow
The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS 7.8
CVE-2017-9742 EXPLOITDB HIGH text WORKING POC
GNU Binutils - Buffer Overflow in score_opcodes Function via Crafted Binary File
The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS 7.8
CVE-2017-9750 EXPLOITDB HIGH text WORKING POC
GNU Binutils 2.28 - Buffer Overflow
opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
CVSS 7.8
CVE-2017-9748 EXPLOITDB HIGH text WORKING POC
GNU Binutils 2.28 - Buffer Overflow in BFD Library via Crafted Binary File
The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.
CVSS 7.8
CVE-2017-9747 EXPLOITDB HIGH text WORKING POC
GNU Binutils 2.28 - Buffer Overflow in ieee_archive_p Function
The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.
CVSS 7.8