PT-2013-4701 · Microsoft · Windows Server 2012 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Active Directory Lightweight Directory Service AD LDS versions on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 Active Directory Services versions on Windows Server 2008 SP2 and R2 SP1 and Serve...

Microsoft Windows Theme File Remote Code Execution Vulnerability (2864063)

This host is missing an important security update according to Microsoft Bulletin MS13-071. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-069: Cumulative Security Update for Internet Explorer (2870699)

The remote host is missing Internet Explorer IE Security Update 2870699. The installed version of IE is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid6982...

PT-2013-2631 · Microsoft · Windows Vista +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 version SP2 Description: A remote code execution issue exists in the way Microsoft Windo...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-1344 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3866 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

MS13-079: Vulnerability in Active Directory could allow denial of service: September 10, 2013

None None...

Microsoft Windows Service Control Manager CVE-2013-3862 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that exists in the Windows Service Control Manager SCM. An attacker can exploit this issue to execute arbitrary code with escalated privileges. Successfully exploiting this issue can lead to the complete compromi...

MS13-071: Vulnerability in Windows Theme file could allow remote code execution: September 10, 2013

None None...

CVE-2008-0726

creationtimestamp| type| source ---|---|--- 2013-09-09 12:51:06+00:00| seen| MISP/522dbc07-2e20-4aaf-8936-39d4ac1d4fa4...

CVE-2008-2042

creationtimestamp| type| source ---|---|--- 2013-09-09 12:51:06+00:00| seen| MISP/522dbc07-2e20-4aaf-8936-39d4ac1d4fa4...

CVE-2008-0655

creationtimestamp| type| source ---|---|--- 2013-09-09 12:51:06+00:00| seen| MISP/522dbc07-2e20-4aaf-8936-39d4ac1d4fa4 2023-06-14 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 06:05:26+00:00| seen| https://t.me/arpsyndicate/1130 2023-12-05 09:37:35+00:00| seen|...

Alcatel-Lucent OmniSwitch Series Agranat-Embweb Management Server Session Cookie Handling Remote Overflow

The remote Alcatel OmniSwitch device is affected by a buffer overflow vulnerability in its web server. An attacker could exploit it to gain control of the remote device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69790; scriptversion"1.6"; scriptcvsdate"Date:...

Oracle Endeca Server createDataStore method command execution

Added: 09/04/2013 CVE: CVE-2013-3763 BID: 61217 OSVDB: 95269 Background Oracle Endeca Server is a hybrid search-analytical database. Problem A vulnerability in the controlSoapBinding service allows remote attackers to execute arbitrary commands by sending a request for the createDataStore method...

Oracle Endeca Server createDataStore method command execution

Added: 09/04/2013 CVE: CVE-2013-3763 BID: 61217 OSVDB: 95269 Background Oracle Endeca Server is a hybrid search-analytical database. Problem A vulnerability in the controlSoapBinding service allows remote attackers to execute arbitrary commands by sending a request for the createDataStore method...

About SSV-ID: 4 4 7 4 POC analysis and reflection-vulnerability warning-the black bar safety net

SSV-ID: 4 4 7 4 SSV-AppDir: Discuz! Vulnerability Published: 2008-11-21 GMT+0 8 0 0 URL: http://sebug.net/vuldb/ssvid-4474 A very old vulnerability, just as the study of penetration of a material of the bale, with its poc, the direct can be used, it feel so magical at the same time want to analyz...

Oracle Endeca Server - Remote Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Oracle Endeca Server Remote Command...

Microsoft Windows TCP/IP ICMPv6 远程拒绝服务漏洞(CVE-2013-3183)(MS13-065)

BUGTRAQ ID: 61666 CVECAN ID: CVE-2013-3183 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows TCP/IP栈内存在拒绝服务漏洞，可使目标系统停止响应。此漏洞源于TCP/IP栈没有正确分配进栈ICMPv6报文的内存。 0 Microsoft Windows Windows Server 2012 Microsoft Windows Windows RT Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows 8 Microsoft...

Microsoft Windows Kernel 本地权限提升漏洞(MS13-063)

BUGTRAQ ID: 61683 CVECAN ID: CVE-2013-3197 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内核中存在NTVDM子系统内存破坏条件造成的权限提升漏洞。攻击者可利用这些漏洞破坏内存，在内核模式中执行任意代码。 0 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard...

Oracle Endeca Server Remote Command Execution Vulnerability

This Metasploit module exploits a command injection vulnerability on the Oracle Endeca Server 7.4.0. The vulnerability exists on the createDataStore method from the controlSoapBinding web service. The vulnerable method only exists on the 7.4.0 branch and isn't available on the 7.5.5.1 branch. On...