MS13-007: Description of the security update for the .NET Framework 3.5 Service Pack 1 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: January 8, 2013

MS13-007: Description of the security update for the .NET Framework 3.5 Service Pack 1 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: January 8, 2013 View products that this article applies to. Introduction Microsoft has released security bulletin MS13-007. You can vi...

MS13-057: Description of the security update for Windows Media Format Runtime 9.5 and 11 (wmvdecod.dll) on Windows XP and Windows Server 2003: July 9, 2013

MS13-057: Description of the security update for Windows Media Format Runtime 9.5 and 11 wmvdecod.dll on Windows XP and Windows Server 2003: July 9, 2013 INTRODUCTION Microsoft has released security bulletin MS13-057. To view the complete security bulletin, go to one of the following Microsoft...

MS13-082: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013

MS13-082: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: October 8, 2013 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework that coul...

MS12-034: Description of the security update for CVE-2012-0181 in Windows XP and Windows Server 2003: May 8, 2012

MS12-034: Description of the security update for CVE-2012-0181 in Windows XP and Windows Server 2003: May 8, 2012 INTRODUCTION Microsoft has released security bulletin MS12-034. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

MS13-002: Description of the security update for XML Core Services 5.0 when it is installed together with Office 2003 Service Pack 3: January 8, 2013

MS13-002: Description of the security update for XML Core Services 5.0 when it is installed together with Office 2003 Service Pack 3: January 8, 2013 Microsoft has released security bulletin MS13-002. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

MS12-074: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows XP and Windows Server 2003: November 13, 2012

MS12-074: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows XP and Windows Server 2003: November 13, 2012 View products that this article applies to.Microsoft has released the security bulletin MS12-074. You can view the complete security bulletin by going to...

MS10-070: Description of the security update for the Microsoft .NET Framework 3.5 on Windows Server 2008, on Windows Vista, on Windows XP, and on Windows Server 2003

MS10-070: Description of the security update for the Microsoft .NET Framework 3.5 on Windows Server 2008, on Windows Vista, on Windows XP, and on Windows Server 2003 INTRODUCTION Microsoft has released security bulletin MS10-070. To view the complete security bulletin, visit one of the following...

LSASS SMB NTLM Exchange Remote Memory Corruption

MS16-137: LSASS Remote Memory Corruption Advisory Title: LSASS SMB NTLM Exchange Remote Memory Corruption Version: 1.0 Issue type: Null Pointer Dereference Authentication: Pre-Authenticated Affected vendor: Microsoft Release date: 8/11/2016 Discovered by: Laurent GaffiAc Advisory by: Laurent...

CURL-CVE-2016-8625 IDNA 2003 makes curl use wrong host

When curl is built with libidn to handle International Domain Names IDNA, it translates them to puny code for DNS resolving using the IDNA 2003 standard, while IDNA 2008 is the modern and up-to-date IDNA standard. This misalignment causes problems with for example domains using the German ß...

Security fix for the ALT Linux 8 package curl version 7.51.0-alt1

Nov. 2, 2016 Anton Farygin 7.51.0-alt1 - new version with security fixes: CVE-2016-8615: cookie injection for other servers CVE-2016-8616: case insensitive password comparison CVE-2016-8617: OOB write via unchecked multiplication CVE-2016-8618: double-free in curlmaprintf CVE-2016-8619: double-fr...

Microsoft Windows (x86) - 'afd.sys' Local Privilege Escalation (MS11-046)

/ Exploit Title: Windows x86 all versions AFD privilege escalation MS11-046 Date: 2016-10-16 Exploit Author: Tomislav Paskalev Vulnerable Software: Windows XP SP3 x86 Windows XP Pro SP2 x64 Windows Server 2003 SP2 x86 Windows Server 2003 SP2 x64 Windows Server 2003 SP2 Itanium-based Systems Windo...

CVE-2003-0585

The vulnerability (CVE-2003-0585) affects Brooky eStore 1.0.1–1.0.2b, comprising an SQL injection in login.asp that lets remote attackers bypass authentication and execute arbitrary SQL via the (1) user or (2) pass parameters. No additional exploit or patch details are provided in the supplied do...

CVE-2003-0584

The vulnerability CVE-2003-0584 affects the Backup and Restore Utility for Unix (BRU) versions 17.0 and earlier. The root cause is a format string vulnerability in a command line argument when BRU runs with setuid privileges, allowing a local attacker to execute arbitrary code. The available docu...

CVE-2003-0586

Brooky eStore 1.0.1 through 1.0.2b is affected by a vulnerability that allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php. The issue impacts confidentiality (partial). No explicit exploitation details or remediation are provided in the suppl...

CVE-2003-0588

admin.php in Digi-news 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password...

CVE-2003-0588

CVE-2003-0588 affects Digi-news 1.1. The vulnerability is an authentication bypass in admin.php: a crafted cookie whose username equals the administrator’s name satisfies an improper condition and does not require a correct password. This allows remote attackers to gain admin access without valid...

CVE-2003-0587

CVE-2003-0587 describes a cross-site scripting (XSS) vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.x. The issue allows remote authenticated users to execute arbitrary web script and potentially gain administrative access via the displayed name attribute of the “ubber” cookie. The avail...

CVE-2003-0583

Technical details for CVE-2003-0583 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2003-0589

CVE-2003-0589 affects Digi-ads 1.1 where admin.php allows remote authentication bypass by sending a cookie with the username set to the administrator’s name. The root cause is an improper condition in admin.php that does not require a correct password, enabling an attacker to gain admin access vi...

CVE-2003-0590

The CVE-2003-0590 entry describes a Cross-site scripting (XSS) vulnerability in Splatt Forum, where remote attackers can inject arbitrary HTML/JavaScript via the post icon (image_subject) field. Affected software is Splatt Forum; the vulnerability is triggered by user-supplied input in the image_...