IISWorks FileMan - fileman.mdb Remote User Database Disclosure

IISWorks FileMan - fileman.mdb Remote User Database Disclosure Exploit Title: IISWorks FileMan fileman.mdb Remote User Database Disclosure Disclosure Date: July 5, 2005 Author: Known Vulnerability Software Link: http://www.scriptdungeon.com/scripts/asp/FileManASP.rar Version: OSVDB: 17824 Securit...

Borland CaliberRM - StarTeam Multicast Service Buffer Overflow (Metasploit)

$Id: borlandstarteam.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

CVE-2003-0220

creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16465 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/firewall/kerioauth.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2010-1885

The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass the trusted documents whitelist fromHCP option and execute arbitrary commands v...

CVE-2010-2265

Cross-site scripting XSS vulnerability in the GetServerName function in sysinfo/commonFunc.js in Microsoft Windows Help and Support Center for Windows XP and Windows Server 2003 allows remote attackers to inject arbitrary web script or HTML via the svr parameter to sysinfo/sysinfomain.htm. NOTE:...

CVE-2010-1885

The CVE-2010-1885 entry concerns the Windows Help and Support Center (HelpCtr) in Windows XP and Windows Server 2003. The vulnerability stems from the MPC::HexToNum function in helpctr.exe failing to properly handle malformed escape sequences, allowing a crafted hcp:// URL to bypass the trusted d...

CVE-2010-2265

CVE-2010-2265 is an XSS in the GetServerName function of sysinfo/commonFunc.js within Windows Help and Support Center on Windows XP and Windows Server 2003, exploitable via svr in sysinfo/sysinfomain.htm. It is paired with CVE-2010-1885, which covers HCP URL handling and can enable command execut...

MS Windows Help and Support Center Remote Code Execution Vulnerability

This host is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbmswindowshelpnsupportcentercodeexecvuln.nasl 6529 2017-07-05 06:05:51Z cfischer $ MS Windows Help and Support Center Remote Code Execution Vulnerability Authors: Antu Sanadi Updated By: Antu Sanadi on...

Microsoft Windows Help and Support Center RCE Vulnerability

Microsoft Windows is prone to a remote code execution RCE vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Windows Kernel "GetDCEx()" Memory Corruption Vulnerability

No description provided by source. "Microsoft Windows is the operating system developed by Microsoft. As of May 2010, Windows was the most widely used system, with more than 90% of the worldwide usage share of operating systems according to Net Application." II. DESCRIPTION ---------------------...

Informix Dynamic Server librpc.dll credentials length buffer overflow

Added: 06/10/2010 CVE: CVE-2009-2753 BID: 38471 OSVDB: 62783 Background Informix Dynamic Server is a database solution from IBM. It includes a portmapper service which listens for connections on port 36890/TCP and uses librpc.dll. Problem A buffer overflow vulnerability in librpc.dll allows remot...

Microsoft Help and Support Center 'sysinfo/sysinfomain.htm' Cross Site Scripting Weakness

Description Help and Support Center is prone to a cross-site scripting weakness because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the privileged zone of the browser of an unsuspecting user. NOTE: This issue is a...

Windows Win32k.sys驱动创建窗口权限提升漏洞（MS10-032）

BUGTRAQ ID: 40569 CVE ID: CVE-2010-0485 Windows是微软发布的非常流行的操作系统。 Windows的Win32k.sys内核驱动在创建新的窗口时没有充分地验证所有的回调参数，本地用户可以通过运行特制的应用程序导致执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft Windows...

Informix Dynamic Server librpc.dll credentials length buffer overflow

Added: 06/10/2010 CVE: CVE-2009-2753 BID: 38471 OSVDB: 62783 Background Informix Dynamic Server is a database solution from IBM. It includes a portmapper service which listens for connections on port 36890/TCP and uses librpc.dll. Problem A buffer overflow vulnerability in librpc.dll allows remot...

Informix Dynamic Server librpc.dll credentials length buffer overflow

Added: 06/10/2010 CVE: CVE-2009-2753 BID: 38471 OSVDB: 62783 Background Informix Dynamic Server is a database solution from IBM. It includes a portmapper service which listens for connections on port 36890/TCP and uses librpc.dll. Problem A buffer overflow vulnerability in librpc.dll allows remot...

Microsoft Office COM对象验证远程代码执行漏洞（MS10-036）

BUGTRAQ ID: 40574 CVE ID: CVE-2010-1263 Microsoft Office是非常流行的办公软件套件。 Office中的组件在实例化对象时没有充分地验证COM对象，用户受骗打开了恶意的Excel、PowerPoint、Publisher、Visio 或Word文档就会导致执行任意代码。 Microsoft Office XP SP3 Microsoft Office 2007 SP2 Microsoft Office 2007 SP1 Microsoft Office 2003 Service Pack 3 临时解决方法：...

Informix Dynamic Server librpc.dll credentials length buffer overflow

Added: 06/10/2010 CVE: CVE-2009-2753 BID: 38471 OSVDB: 62783 Background Informix Dynamic Server is a database solution from IBM. It includes a portmapper service which listens for connections on port 36890/TCP and uses librpc.dll. Problem A buffer overflow vulnerability in librpc.dll allows remot...

Microsoft IIS Authentication Remote Code Execution Vulnerability (982666)

This host is missing an important security update according to Microsoft Bulletin MS10-040. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft IIS Authentication Remote Code Execution Vulnerability (982666)

This host is missing an important security update according to Microsoft Bulletin MS10-040. OpenVAS Vulnerability Test $Id: secpodms10-040.nasl 6605 2017-07-07 11:22:07Z cfischer $ Microsoft IIS Authentication Remote Code Execution Vulnerability 982666 Authors: Sooraj KS Updated By: Madhuri D on...

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)

This host is missing an important security update according to Microsoft Bulletin MS10-037. OpenVAS Vulnerability Test $Id: secpodms10-037.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability 980218 Authors: Sooraj KS...