Allele Security Intelligence - Command Execution

ASA-2019-00660 – Git: Submodule update command execution

Posted on December 11, 2019December 12, 2019 by Allele Security Intelligence in Alerts

Arbitrary command execution is possible in Git because a "git submodule update" operation can run commands found in the .gitmodules file of a malicious repository.

ASA-2019-00580 – NSA Ghidra: Uncontrolled Search Path Element when executing CMD

Posted on October 19, 2019October 21, 2019 by Allele Security Intelligence in Alerts

When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser > Window > Python" option, Ghidra will try to execute the cmd.exe program from this working directory.

ASA-2018-00064 – Zoom: Unauthorized command execution

Posted on December 1, 2018July 9, 2019 by Allele Security Intelligence in Alerts

There's a vulnerability in Zoom's Desktop Conferencing Application that allows for execution of unauthorized Zoom commands like spoofing chat messages, hijacking screen controls and kicking attendees off calls and locking them out of meetings. This vulnerability could be exploited in a few scenarios: 1) a Zoom meeting attendee could go rogue; 2) an attacker on the local access network (LAN) or 3) a remote attacker over wide area network (WAN) could theoretically use this vulnerability to hijack an ongoing Zoom meeting.