Novell ZENworks Configuration Management Preboot Service 0x6c Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Novell ZENworks Configuration...

Novell ZENworks Configuration Management Preboot Service 0x06 Buffer Overflow

This module exploits a remote buffer overflow in the ZENworks Configuration Management 10 SP2. The vulnerability exists in the Preboot service and can be triggered by sending a specially crafted packet with the opcode 0x06 PROXYCMDCLEARWS to the 998/TCP port. The module has been successfully test...

Microsoft Unauthorized Digital Certificates Spoofing Vulnerability (2728973)

This host is installed with Microsoft Windows operating system and is prone to Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmsunauthdigitalcertspoofingvuln.nasl 8323 2018-01-08 14:50:05Z gveerendra $ Microsoft Unauthorized Digital Certificates Spoofing Vulnerability 2728973 Authors:...

Microsoft Windows Data Access Components Remote Code Execution Vulnerability (2698365)

This host is missing a critical security update according to Microsoft Bulletin MS12-045. OpenVAS Vulnerability Test $Id: secpodms12-045.nasl 9122 2018-03-17 14:01:04Z cfischer $ Microsoft Windows Data Access Components Remote Code Execution Vulnerability 2698365 Authors: Rachana Shetty Copyright...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2718523)

This host has important security update missing according to Microsoft Bulletin MS12-047. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Integer overflow

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users t...

CVE-2012-1854

Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications VBA; and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current...

CVE-2012-1893

CVE-2012-1893 affects a Windows kernel-mode component, specifically the win32k.sys driver. The vulnerability arises from improper validation of callback parameters when creating a hook procedure, enabling local users to escalate privileges by crafting a malicious application. Affected products in...

CVE-2012-1854

The CVE-2012-1854 entry describes an insecure library loading vulnerability in Microsoft Visual Basic for Applications (VBA) via VBE6.dll. Affected products include Microsoft Office 2003 SP3, 2007 SP2/SP3, and 2010 Gold/SP1, with VBA and Summit VBA SDK also implicated. The root cause is untrusted...

Microsoft Windows CVE-2012-1893 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...

Microsoft Windows CVE-2012-1890 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...

Microsoft Windows File/Directory Names Handling Arbitrary Command Injection Vulnerability

Description Microsoft Windows is prone to a remote command-injection that affects the Windows Shell component vulnerability because it fails to adequately sanitize user-supplied input data. Attackers can exploit this issue to execute arbitrary shell commands with user-level privileges. This may...

PT-2012-2373 · Microsoft · Windows Xp +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: A...

HP Operations Agent Opcode coda.exe 0x34 Buffer Overflow

This module exploits a buffer overflow vulnerability in HP Operations Agent for Windows. The vulnerability exists in the HP Software Performance Core Program component coda.exe when parsing requests for the 0x34 opcode. This module has been tested successfully on HP Operations Agent 11.00 over...

XM-Personal-FTP-Server

XM FTP Server Command Remote Buffer Overflow Exploit when parsing the command 'USR/PASS', which leads to a stack based overflow. FTP Server allow remote anonymous login by default exploiting these issues could allow an attacker to compromise the application, access or modify data. import socket...

Avaya IP Office Customer Call Reporter ImageUpload.ashx Remote Command Execution

This module exploits an authentication bypass vulnerability on Avaya IP Office Customer Call Reporter, which allows a remote user to upload arbitrary files through the ImageUpload.ashx component. It can be abused to upload and execute arbitrary ASP .NET code. The vulnerability has been tested...

HP OpenView Storage Data Protector inet Service EXEC_CMD Remote Overflow

Added: 06/27/2012 CVE: CVE-2011-1866 BID: 48488 OSVDB: 73572 Background HP Data Protector is an automated data backup solution. Problem A buffer overflow vulnerability in omniinet.exe in the inet service of HP OpenView Storage Data Protector allows remote attackers to execute arbitrary commands b...

HP OpenView Storage Data Protector inet Service EXEC_CMD Remote Overflow

Added: 06/27/2012 CVE: CVE-2011-1866 BID: 48488 OSVDB: 73572 Background HP Data Protector is an automated data backup solution. Problem A buffer overflow vulnerability in omniinet.exe in the inet service of HP OpenView Storage Data Protector allows remote attackers to execute arbitrary commands b...

HP Data Protector Client 6.11 / 6.20 Remote Code Execution

!/usr/bin/env python Exploit Title: HP Data Protector Client EXECCMD Remote Code Execution Vulnerability Date: 2012-12-06 Exploit Author: Ben Turner Vendor Homepage: www.hp.com Version: 6.11 & 6.20 Tested on: Windows 2003 Server SP2 en CVE: CVE-2011-0922 Notes: ZDI-11-056 Reference:...

42gradusi - SQL injection Vulnerability

Exploit for php platform in category web applications Title: ====== 42gradusi - SQL injection Vulnerability Date: ===== 2012-06-20 ======= I'm cheki Member From Inj3ct0r TEAM ======= Introduction: ============= 42 GRADUSI developed a unique capability product for Georgia digital narket- 42 CMS,...