CVE-2013-3891

Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Memory Corruption Vulnerability."...

Microsoft Comctl32 Integer Overflow Vulnerability (2864058)

This host is missing an critical security update according to Microsoft Bulletin MS13-083. OpenVAS Vulnerability Test $Id: secpodms13-083.nasl 5351 2017-02-20 08:03:12Z mwiegand $ Microsoft Comctl32 Integer Overflow Vulnerability 2864058 Authors: Shashi Kiran N Copyright: Copyright c 2013 SecPod,...

Microsoft Comctl32 Integer Overflow Vulnerability (2864058)

This host is missing a critical security update according to Microsoft Bulletin MS13-083. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-086: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2885084)

The remote Windows host is running a version of Microsoft Office or Microsoft Office Compatibility Pack that is affected by multiple remote code execution vulnerabilities. The vulnerabilities exist in the way that Microsoft Word parses specially crafted files. An attacker who successfully exploit...

Security Update for Word 2003 (KB2826020)

A security vulnerability exists in Word 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

HP Intelligent Management SOM Account Creation

This module exploits a lack of authentication and access control in HP Intelligent Management, specifically in the AccountService RpcServiceServlet from the SOM component, in order to create a SOM account with Account Management permissions. This module has been tested successfully on HP...

MS13-081: Description of the security update for kernel-mode drivers: October 8, 2013

None None...

MS13-081: Description of the security update for USB drivers: October 8, 2013

None None...

MS13-083: Vulnerability in Windows Common Control Library could allow remote code execution: October 8, 2013

None None...

HP ProCurve Manager SNAC UpdateCertificatesServlet FileName Vulnerability

Added: 10/03/2013 CVE: CVE-2013-4812 BID: 62348 OSVDB: 97155 Background HP ProCurve Manager PCM is a secure, advanced Windows-based network management platform that allows administrators to configure, update, monitor, and troubleshoot ProCurve devices centrally. Problem The SNAC registration serv...

PHP IDNA Convert 0.8.0 Cross Site Scripting Vulnerability

Cross-site scripting XSS vulnerability in parameters encoded/decoded in the class PHP IDNA Convert allows remote attackers to inject arbitrary web script or HTML. PHP IDNA Convert Cross-site scripting XSS Vendor product description PHP NetIDNA is a class to convert between the Punycode and Unicod...

CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow

CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow. Remote exploit for windows platform This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use...

Microsoft Windows Theme File Handling - Arbitrary Code Execution (MS13-071) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-071 Microsof...

SolarWinds Server and Application Monitor ActiveX (Pepco32c) Buffer Overflow

Exploit for windows platform in category dos / poc ' 132 bytes in we control ecx before the call ecx instruction buffer = String132, "A" ecx = String4, "B" junk = String3086, "C" arg1 = buffer + ecx + junk target.PEstrarg1 = arg1 0day.today 2018-03-10...

SolarWinds Monitor 6.0 Buffer Overflow

' 132 bytes in we control ecx before the call ecx instruction buffer = String132, "A" ecx = String4, "B" junk = String3086, "C" arg1 = buffer + ecx + junk target.PEstrarg1 = arg1...

SolarWinds Server and Application Monitor - ActiveX Pepco32c Buffer Overflow

SolarWinds Server and Application Monitor - ActiveX Pepco32c Buffer Overflow ' 132 bytes in we control ecx before the call ecx instruction buffer = String132, "A" ecx = String4, "B" junk = String3086, "C" arg1 = buffer + ecx + junk target.PEstrarg1 = arg1...

CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow Vulnerability

This Metasploit module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup r11.1 - r11.5. By sending a specially crafted DCERPC request, an attacker could overflow the buffer and execute arbitrary code. This file is part of the Metasploit Framework and may be subjec...

MS13-071 Microsoft Windows Theme File Handling Code Execution

This Metasploit module exploits a vulnerability mainly affecting Microsoft Windows XP and Windows 2003. The vulnerability exists in the handling of the Screen Saver path, in the boot section. An arbitrary path can be used as screen saver, including a remote SMB resource, which allows for remote...

MS13-071 Microsoft Windows Theme File Handling Arbitrary Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-071 Microsof...

[SecureCheq v1.0] The Security Configuration Management made easy!

SecureCheq is a fast, simple utility for Windows servers and desktops that answers these questions while it tests for common configuration risks. This free utility: Tests for a subset of typical and often dangerous Windows configuration errors Provides detailed remediation and repair advice Tests...