Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2015-07593)

Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1. An attacker could obtain...

CVE-2015-6104

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted embedded...

CVE-2015-6104

CVE-2015-6104 affects the Adobe Type Manager Library in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, 2012, RT/8.1, 10 Gold/1511). The vulnerability allows remote code execution via a crafted embedded font, due to a flaw in font processing in Win32k/font handling (Windo...

CVE-2015-6113

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to bypass intended filesystem permissions by leveraging Low Integrity...

CVE-2015-6098

CVE-2015-6098 is a local privilege-escalation flaw in the Windows Network Driver Interface Specification (NDIS) with a buffer-overflow in ndis.sys. A crafted local app can gain elevated privileges on Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. Public exploit references e...

Microsoft Windows Winsock Elevation of Privilege Vulnerability (3104521)

This host is missing an important security update according to Microsoft Bulletin MS15-119. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Remote Code Execution Vulnerabilities (3105864)

This host is missing a critical security update according to Microsoft Bulletin MS15-115. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-117: Security Update for NDIS to Address Elevation of Privilege (3101722)

The remote Windows host is affected by an elevation of privilege vulnerability in the Network Driver Interface Specification NDIS due to a failure to check the length of a buffer prior to copying it into memory. An authenticated, remote attacker can exploit this vulnerability, via a specially...

Microsoft Windows Kerberos CVE-2015-6095 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to a local security-bypass vulnerability. A local attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based...

MS15-117: Security update for NDIS to address elevation of privilege: November 10, 2015

None None...

MS15-112: Cumulative Security Update for Internet Explorer (3104517)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3104517. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by...

ip-https-discover NSE Script

Checks if the IP over HTTPS IP-HTTPS Tunneling Protocol 1 is supported. IP-HTTPS sends Teredo related IPv6 packets over an IPv4-based HTTPS session. This indicates that Microsoft DirectAccess 2, which allows remote clients to access intranet resources on a domain basis, is supported. Windows...

Symantec pcAnywhere 12.5.0 (Windows x86) - Remote Code Execution

!/usr/bin/python Exploit Title: Symantec pcAnywhere v12.5.0 Windows x86 RCE Date: 2015-10-31 Exploit Author: Tomislav Paskalev Vendor Homepage: https://www.symantec.com/ Software Link: http://esdownload.symantec.com/akdlm/CD/MTV/pcAnywhere125MarketingTrialware.exe Version: Symantec pcAnywhere...

CVE-2008-0352

The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service panic via a certain IPv6 packet, possibly involving the Jumbo Payload hop-by-hop option jumbogram...

CVE-2008-4097

MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed wh...

CVE-2008-3686

The rt6fillnode function in net/ipv6/route.c in Linux kernel 2.6.26-rc4, 2.6.26.2, and possibly other 2.6.26 versions, allows local users to cause a denial of service kernel OOPS via IPv6 requests when no IPv6 input device is in use, which triggers a NULL pointer dereference...

CVE-2008-5701

Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service system crash via an o32 syscall with a small syscall number, which leads to an attempted read operation outside the bounds of the...

CVE-2008-4799

pamperspective in Netpbm before 10.35.48 does not properly calculate a window height, which allows context-dependent attackers to cause a denial of service crash via a crafted image file that triggers an out-of-bounds read...

CVE-2008-4109

A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service connection sl...

CVE-2008-4410

The vmiwriteldtentry function in arch/x86/kernel/vmi32.c in the Virtual Machine Interface VMI in the Linux kernel 2.6.26.5 invokes writeidtentry where writeldtentry was intended, which allows local users to cause a denial of service persistent application failure via crafted function calls, relat...