{"uuid": "2d054616-2689-4dfa-a6f9-15d7d77339f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44153", "type": "seen", "source": "https://t.me/hacking_Attack/34178", "content": "Exploit Collector\nReprise License Manager 14.2 Remote Binary Execution\n\nhttps://4.bp.blogspot.com/-mkcU-A73eZ4/WWlu7eKaHEI/AAAAAAAAIJY/m_4841aOwNcKGKR9ykgWprFWjwy04TKNACLcBGAs/s1600/h11.png \nReprise License Manager version 14.2 suffers from an authenticated remote binary execution vulnerability.\n\nMD5 | 168a71810d65bf8de3fe62438600faa2\n\nDownload\n# Product:  Reprise License Manager 14.2\n# Vendor:   Reprise Software\n# CVE ID:   CVE-2021-44153\n# Vulnerability Title: Authenticated Remote Binary Execution\n# Severity: High\n# Author(s): Mark Staal Steenberg, Bilal El Ghoul, Gionathan Armando Reale, Andreas Fyhn Andersen, Oliver Lind Nordestgaard \n# Date:   2021-11-25\n#############################################################\n\nIntroduction:\n\nWhen editing the license file, it is possible for an admin user to enable an option to run arbitrary executables.\nAn attacker can exploit this to run a malicious binary on startup, or when triggering the \"Reread/Restart Servers\" function on the webserver. (Exploitation does not require CVE-2018-15573, because the license file is meant to be changed in the application.)\n\nVulnerability:\n\nA license file containing the following, would execute calc.exe as an example of this vulnerability, it is also possible to provide arguments to the executables:\n\nISV demo \"C:\\Windows\\System32\\calc.exe\"\n\nIf CVE-2018-15573 remains unpatched, files could be created on the system and then executed. \n\nRecommendation:\nDon't allow user-specified binaries to be run. Use a allow-list if absolutely required.\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:31.615279Z"}