Immunity Canvas: MS10_059

Name| ms10059 ---|--- CVE| CVE-2010-2554 Exploit Pack| CANVAS Description| ms10059 Notes| References: http://www.microsoft.com/technet/security/bulletin/MS10-059.mspx CVE Name: CVE-2010-2554 VENDOR: Microsoft Notes: This exploit gain SYSTEM from NETWORKSERVICE or DefaultAppPool user by duplicatin...

CVE-2010-2554

The Tracing Feature for Services in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 has incorrect ACLs on its registry keys, which allows local users to gain privileges via vectors involving a named pipe and impersonation, aka "Tracing Registry Key ACL...

CVE-2010-2554

CVE-2010-2554 affects the Tracing Feature for Services in Windows Vista SP1/ SP2, Windows Server 2008 SP2/R2, and Windows 7. The vulnerability arises from incorrect ACLs on registry keys used by the tracing feature, enabling local users to gain elevated privileges via a named pipe and impersonati...

MS10-059: Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege (982799)

The version of Tracing Feature for Services on the remote host has the following vulnerabilities : - Windows places incorrect ACLs on registry keys, which could allow an attacker to execute code with elevated privileges. CVE-2010-2554 - Memory is allocated in an unspecified, unsafe manner when...

CVE-2010-2554

creationtimestamp| type| source ---|---|--- 2010-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14610 2025-01-21 18:01:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2444 2025-08-31 03:01:28+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

Microsoft Windows - Tracing Registry Key ACL Privilege Escalation

source: https://www.securityfocus.com/bid/42269/info Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the complete compromise of affected computer...

CVE-2009-2554

SQL injection vulnerability in the search method in jobline.class.php in Jobline comjobline 1.1.2.2, 1.3.1, and possibly earlier versions, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the search parameter in a results action to index.php, which invokes th...

CVE-2009-2554

CVE-2009-2554 is an SQL injection in Joomla! Jobline (com_jobline) via the search parameter in the results action to index.php. Affected versions include Jobline 1.1.2.2, 1.3.1, and possibly earlier versions. The vulnerability arises in the searchJobPostings flow invoked by jobline.php, enabling ...

CVE-2008-2554

The CVE-2008-2554 entry describes SQL injection vulnerabilities in BP Blog 6.0. The affected component is BP Blog 6.0, with vulnerable inputs being the id parameter to template_permalink.asp and the cat parameter to template_archives_cat.asp, leading to arbitrary SQL execution. The underlying cau...

CVE-2008-2554

creationtimestamp| type| source ---|---|--- 2008-05-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5705...

CVE-2007-2554

CVE-2007-2554 affects Associated Press (AP) Newspower 4.0.1 and earlier. The root cause is a default blank MySQL root password, enabling remote attackers to insert or modify news articles via shows.tblscript. The observed impact is potential unauthenticated data integrity compromise (article inse...

CVE-2006-2554

The vulnerability CVE-2006-2554 is a buffer overflow in the tell_player_surr_changes function of Genecys 0.2 and earlier . The root cause is unchecked/overly long input arguments that can allow remote attackers to execute arbitrary code. Documented impact is remote code execution without user int...

CVE-2004-2554

The CVE-2004-2554 issue affects Novell Client Firewall (NCF) 2.0, which is based on Agnitum Outpost Firewall. The vulnerability allows local attackers to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM priv...

CVE-2005-2554

The CVE-2005-2554 issue affects Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3). The web server stores in insecure permissions for the Common Framework\Db folder, allowing local users to read arbitrary files by creating a subfolder in the EPO agent web root. This is an information‑l...

CVE-2004-2554

Novell Client Firewall NCF 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges...