28068 matches found
Microsoft Security Advisory: Registry update to improve credentials protection and management for Windows systems that do not have the 2919355 update installed: July 8, 2014
None None...
MS14-040: Vulnerability in Ancillary Function Driver (AFD) Could Allow Elevation of Privilege (2975684)
The remote Windows host contains a version of the Ancillary Function Driver afd.sys that is affected by a privilege escalation vulnerability. The flaw is due to the Ancillary Function Driver not properly processing user-supplied input, leading to a double free scenario, allowing a local attacker ...
Microsoft Windows On-Screen Keyboard CVE-2014-2781 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary programs with elevated privileges. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing 6.0 Standard Avaya Aura...
MS14-041: Vulnerability in Microsoft DirectShow Could Allow Elevation of Privilege (2975681)
The remote Windows host is affected by a vulnerability in Microsoft DirectShow that could allow privilege escalation. Note that this issue can only be exploited if an attacker first successfully exploits another vulnerability in a low integrity process. C Tenable Network Security, Inc...
MS14-040: Description of the security update for an ancillary function driver on systems that do not have the 2919355 update installed: July 8, 2014
None None...
Microsoft DirectX DirectShow CVE-2014-2780 Local Privilege Escalation Vulnerability
Description Microsoft DirectX DirectShow is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary code with elevated privileges in the context of the logged-in user. Failed exploit attempts may cause a denial-of-service condition...
Microsoft Windows Ancillary Function Driver CVE-2014-1767 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...
Microsoft Security Advisory: Registry update to improve credentials protection and management for Windows-based systems that have the 2919355 update installed: July 8, 2014
None None...
MS14-041: Description of the security update for DirectShow systems that do not have the 2919355 update installed: July 8, 2014
None None...
RedHat Update for tomcat RHSA-2014:0686-01
The remote host is missing an update for the Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Internet Explorer 8 - Fixed Col Span ID Full ASLR, DEP & EMET 4.1.X Bypass
No description provided by source. !-- Internet Explorer 8 Fixed Col Span ID full ASLR, DEP and EMET 4.1.X bypass Offensive Security Research Team http://www.offensive-security.com/vulndev/disarming-enhanced-mitigation-experience-toolkit-emet Affected Software: Internet Explorer 8 Vulnerability:...
Wordpress Automatic Plugin 2.0.3 - SQL Injection
No description provided by source. Title: ====== Wordpress Automatic Plugin v2.0.3 SQL Injection Date: ===== 2012-06-15 Website: =========== http://codecanyon.net/item/wordpress-automatic-plugin/1904470 Introduction: ============= Wordpress automatic plugin posts quality targeted articles, Amazon...
wordpress mini mail dashboard widget 1.42 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012:...
NVIDIA Install Application 2.1002.85.551 (NVI2.dll) Unicode Buffer Overflow PoC
No description provided by source. !-- NVIDIA Install Application 2.1002.85.551 NVI2.dll Unicode Buffer Overflow PoC Vendor: NVIDIA Corporation Product web page: http://www.nvidia.com Affected version: 2.1002.85.551 Driver: 306.97 Summary: NVIDIA install core application for Windows. Desc: The...
Sysax <= 5.62 Admin Interface Local Buffer Overflow
No description provided by source. !/usr/bin/python Title: Sysax = 5.62 Admin Interface Local Buffer Overflow Author: Craig Freyman @cd1zz Tested on: XP SP3 32bit Date Discovered: June 15, 2012 Vendor Contacted: June 19, 2012 Details:...
Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow
No description provided by source. !/usr/bin/perl Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow Vendor: Apple Inc. Product web page: http://www.apple.com Affected version: 10.6.1.7 and 10.6.0.40 Summary: iTunes is a free application for your Mac or PC. It lets you organize...
Express Burn Plus 4.58 - EBP Project File Handling Buffer Overflow PoC
No description provided by source. !/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you to create and copy many kinds of disc...
Openconstructor CMS 3.12.0 \'id\' Parameter Multiple SQL Injection
No description provided by source. Title: Openconstructor CMS 3.12.0 'id' parameter multiple SQL injection vulnerabilities Affected Software: http://www.openconstructor.org/ http://code.google.com/p/openconstructor/downloads/list...
IBM Cognos tm1admsd.exe Overflow Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Novell NCP Pre-Auth Remote Root Exploit
No description provided by source. In the interest of full-disclosure, here is a remote exploit for the vulnerability found by David Klein: Demonstration Novell NCP Pre-Auth Remote Stack Buffer Overflow Connecting to host 127.0.0.1... Connected! Sending message 1 23 bytes -- 44 6d 64 54 00 00 00 ...