Microsoft Windows Ancillary Function Driver CVE-2012-0148 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...

Gentoo Security Advisory GLSA 201111-07 (TinTin++)

The remote host is missing updates announced in advisory GLSA 201111-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201111-04 (PhpDocumentor)

The remote host is missing updates announced in advisory GLSA 201111-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201201-11 (fwbuilder)

The remote host is missing updates announced in advisory GLSA 201201-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201201-01 (phpMyAdmin)

The remote host is missing updates announced in advisory GLSA 201201-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201201-02 (MySQL)

The remote host is missing updates announced in advisory GLSA 201201-02. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201111-07 (TinTin++)

The remote host is missing updates announced in advisory GLSA 201111-07. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Icona SpA C6 Messenger Downloader Arbitrary File Download / Execute

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Icona SpA C6...

Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute

This module exploits a vulnerability in Icona SpA C6 Messenger 1.0.0.1. The vulnerability is in the DownloaderActiveX Control DownloaderActiveX.ocx. The insecure control can be abused to download and execute arbitrary files in the context of the currently logged-on user. This module requires...

Microsoft Windows Media Player ‘winmm.dll’ MIDI文件解析远程代码执行漏洞(CVE-2012-0003)

CVE-2012-0003 Microsoft Windows是微软发布的非常流行的操作系统。Windows Media Player是系统的多媒体播放组件。 WMP在处理畸形结构的MIDI数据时存在内存破坏漏洞。远程攻击者可利用该漏洞通过诱使用户访问恶意网页控制用户系统。 0 Microsoft Windows XP Professional Microsoft Windows XP Home Edition Microsoft Windows Vista Microsoft Windows Storage Server 2003 Microsoft Windows Server 20...

EasyPage SQL Injection Vulnerability-vulnerability warning-the black bar safety net

Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2 0 0 8 Microsoft-IIS/7.5 Dork : inurl:default. aspx? page=Document&app=Documents&docId= Contact : Info 4t RedSecurity d0t COM Home :...

ARYADAD SQL Injection / Shell Upload

Title : ARYADAD Multi Vulnerability Author : Red Security TEAM Date : 21/01/2012 Vendor : http://cms.aryadad.com/ Tested On : Windows Server 2008 IIS 7.5 Dork : Powered by ARYADAD Corporation Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit : I : Blind SQL Injection...

ARYADAD Multi Vulnerability

Exploit for asp platform in category web applications Title : ARYADAD Multi Vulnerability Author : Red Security TEAM Date : 21/01/2012 Vendor : http://cms.aryadad.com/ Tested On : Windows Server 2008 IIS 7.5 Dork : Powered by ARYADAD Corporation Contact : Info 4t RedSecurity d0t COM Home :...

[security bulletin] HPSBMU02736 SSRT100699 rev.1 - HP Business Availability Center (BAC) and Business Service Management (BSM), Remote Unauthorized Access to Sensitive Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03127140 Version: 1 HPSBMU02736 SSRT100699 rev.1 - HP Business Availability Center BAC and Business Service Management BSM, Remote Unauthorized Access to Sensitive Information NOTICE: The...

ARYADAD - Multiple Vulnerabilities

ARYADAD - Multiple Vulnerabilities Title : ARYADAD Multi Vulnerability Author : Red Security TEAM Date : 21/01/2012 Vendor : http://cms.aryadad.com/ Tested On : Windows Server 2008 IIS 7.5 Dork : Powered by ARYADAD Corporation Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM...

ARYADAD - Multiple Vulnerabilities

Title : ARYADAD Multi Vulnerability Author : Red Security TEAM Date : 21/01/2012 Vendor : http://cms.aryadad.com/ Tested On : Windows Server 2008 IIS 7.5 Dork : Powered by ARYADAD Corporation Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit : I : Blind SQL Injection...

EasyPage - SQL Injection

Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2008 Microsoft-IIS/7.5 Dork : inurl:default.aspx?page=Document&app=Documents&docId= Contact : Info 4t RedSecurity d0t COM Home :...

EasyPage - SQL Injection

EasyPage - SQL Injection Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2008 Microsoft-IIS/7.5 Dork : inurl:default.aspx?page=Document&app=Documents&docId= Contact : Info 4t RedSecurity d...

EasyPage SQL Injection Vulnerability

Exploit for asp platform in category web applications Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2008 Microsoft-IIS/7.5 Dork : inurl:default.aspx?page=Document&app=Documents&docId=...

Elevating Privileges Via Windows Installers

There’s an odd bit of behavior that some Windows systems will exhibit when certain kinds of installers are launched, automatically elevating the privileges of the installer process to system-level privileges. In theory, the issue shouldn’t be exploitable because at one point in the process the...