Microsoft Windows Kernel CVE-2017-11851 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows Media Player CVE-2017-11768 Local Information Disclosure Vulnerability

Description Microsoft Windows Media Player is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Window...

Microsoft Windows Kernel CVE-2017-11880 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

PT-2017-12265

Name of the Vulnerable Software and Affected Versions Windows 7 SP1 Windows Server 2008 SP2 Windows Server 2008 R2 SP1 Windows Server 2012 Description The issue concerns the Microsoft Windows embedded OpenType EOT font engine, which improperly handles specially crafted embedded fonts. This can...

Windows 2008 November 2017 Multiple Security Updates

The remote Windows host is missing multiple security updates released on 2017/11/14. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. CVE-2017-11880 - An information disclosu...

PT-2017-12275

Name of the Vulnerable Software and Affected Versions Windows 7 SP1 Windows Server 2008 SP2 Windows Server 2008 R2 SP1 Description The issue allows an attacker to compromise a user's system by running a specially crafted application, due to the improper disclosure of kernel memory addresses. This...

Windows 7 and Windows Server 2008 R2 November 2017 Security Updates

The remote Windows host is missing security update 4048960 or cumulative update 4048957. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a...

Microsoft Windows Kernel CVE-2017-11831 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Windows Server 2008 Defense in Depth (KB4042723)

This host is missing an important security update according to Microsoft KB4042723. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments e.g., invalid hostnames containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used...

CVE-2008-7319

The CVE-2008-7319 issue affects the Perl Net::Ping::External extension (up to version 0.15) where External.pm does not properly sanitize inputs containing shell metacharacters before using backticks, enabling shell command injection and arbitrary command execution when untrusted input is supplied...

Sql injection

Vastal I-Tech Agent Zone aka The Real Estate Script allows SQL Injection in searchCommercial.php via the propertytype, city, or postedby parameter, or searchResidential.php via the propertytype, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and...

Sql injection

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

Sql injection

Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'productid' to addtocart.php, a different vulnerability than CVE-2008-4461...

Mura CMS < 6.2 - Server-Side Request Forgery / XML External Entity Injection Vulnerabilities

Exploit for unknown platform in category web applications Exploit Title: Mura CMS before 6.2 SSRF + XXE Date: 30-10-2017 Exploit Author: Anthony Cole Vendor Homepage: http://www.getmura.com/ Version: before 6.2 Contact: http://twitter.com/acole76 Website: http://twitter.com/acole76 Tested on:...

October 2017 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB 4043766)

October 2017 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB 4043766 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1,...

October 2017 Security and Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 (KB 4043768)

October 2017 Security and Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 KB 4043768 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008...

Description of the Windows Server 2008 Windows wireless WPA group key reinstallation vulnerability: October 16, 2017

Description of the Windows Server 2008 Windows wireless WPA group key reinstallation vulnerability: October 16, 2017 Summary A spoofing vulnerability exists in the Windows implementation of wireless networking. An attacker who successfully exploits this vulnerability could potentially replay...

October 2017 Preview of Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 (KB 4042201)

October 2017 Preview of Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 KB 4042201 View products that this article applies to. Summary This article lists the Quality Rollup for the .NET Framework 2.0 SP2, 4.5.2, and 4.6 for Windows Server 2008...

CVE-2017-11810

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the...