30835 matches found
IcoFX 2.6 Buffer Overflow
Exploit Title: IcoFX 2.6 - '.ico' Buffer Overflow SEH + DEP Bypass using JOP Date: 2020-05-20 Exploit Author: Austin Babcock Vendor Homepage: https://icofx.ro/ Software Link: https://drive.google.com/file/d/1SONzNStAW3pAPU5IUvsYS3z0jYymEZn/view?usp=sharing Version: 2.6.0.0 Tested on: Windows 7...
rubygem-json: Unsafe object creation vulnerability in JSON
A flaw was found in rubygem-json. While parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269...
FreeBSD : wayland -- integer overflow (fd24a530-c202-11eb-b217-b42e99639323)
Tobias Stoeckmann reports : The libXcursor fix for CVE-2013-2003 has never been imported into wayland, leaving it vulnerable to it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrigh...
CVE-2013-4536
An user able to alter the savevm data either on the disk or over the wire during migration could use this flaw to to corrupt QEMU process memory on the destination host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process...
CVE-2013-4536
CVE-2013-4536 affects QEMU; an attacker able to alter savevm data (on disk or during migration) could corrupt the QEMU process memory on the destination host, potentially enabling arbitrary code execution with QEMU process privileges. The provided documents describe the vulnerability and impact b...
FreeBSD : texproc/expat2 -- billion laugh attack (5fa90ee6-bc9e-11eb-a287-e0d55e2a8bf9)
Kurt Seifried reports : So here are the CVE's for the two big ones, libxml2 and expat. Both are affected by the expansion of internal entities which can be used to consume resources and external entities which can cause a denial of service against other services, be used to port scan, etc.. A...
Microsoft Exchange 2019 - Unauthenticated Email Download Exploit
Exploit Title: Microsoft Exchange 2019 - Unauthenticated Email Download Metasploit Exploit Author: RAMELLA Sébastien Vendor Homepage: https://microsoft.com Version: This vulnerability affects Exchange 2013 Versions 'Microsoft Exchange ProxyLogon Collector', 'Description' = %q This module scan for...
Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free
Exploit Title: Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free Date: 15/05/2021 CVE : CVE-2013-3893 PoC: https://github.com/travelworld/cve20133893trigger.html/blob/gh-pages/params.json Exploit Author: SlidingWindow Vendor Advisory:...
Microsoft Internet Explorer 8 - (SetMouseCapture) Use After Free Exploit
Exploit Title: Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free CVE : CVE-2013-3893 PoC: https://github.com/travelworld/cve20133893trigger.html/blob/gh-pages/params.json Exploit Author: SlidingWindow Vendor Advisory:...
Microsoft Internet Explorer 8 SetMouseCapture Use-After-Free
Exploit Title: Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free Date: 15/05/2021 CVE : CVE-2013-3893 PoC: https://github.com/travelworld/cve20133893trigger.html/blob/gh-pages/params.json Exploit Author: SlidingWindow Vendor Advisory:...
Microsoft Office Remote Code Execution Vulnerabilities (KB5001927)
This host is missing an important security update according to Microsoft KB5001927 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB5001936)
This host is missing an important security update according to Microsoft KB5001936 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office Remote Code Execution Vulnerability (KB5001925)
This host is missing an important security update according to Microsoft KB5001925. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Word 2013 Remote Code Execution Vulnerability (KB5001931)
This host is missing an important security update according to Microsoft KB5001931 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Description of the security update for SharePoint Foundation 2013: May 11, 2021 (KB5001935)
Description of the security update for SharePoint Foundation 2013: May 11, 2021 KB5001935 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability, information disclosure vulnerability, and spoofing vulnerability, and Microsoft SharePoint remote code...
Description of the security update for Office 2013: May 11, 2021 (KB5001927)
Description of the security update for Office 2013: May 11, 2021 KB5001927 Summary This security update resolves a Microsoft Excel remote code execution vulnerability and Microsoft Office information disclosure vulnerability. To learn more about the vulnerabilities, see the following security...
Description of the security update for Excel 2013: May 11, 2021 (KB5001936)
Description of the security update for Excel 2013: May 11, 2021 KB5001936 Summary This security update resolves a Microsoft Excel remote code execution vulnerability, and Office information disclosure vulnerability. To learn more about the vulnerabilities, see the following security advisories:...
Description of the security update for Office 2013: May 11, 2021 (KB5001925)
Description of the security update for Office 2013: May 11, 2021 KB5001925 Summary This security update resolves a Microsoft Office Remote Code Execution Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-31176. Note: To apply this...
Security update 2021-05-11
...
Description of the security update for Office 2013: May 11, 2021 (KB4493206)
Description of the security update for Office 2013: May 11, 2021 KB4493206 Summary This security update resolves a Microsoft Access remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28455. Note: To apply this...