Microsoft Lync Version Detection

Detects the installed version of Microsoft Lync. The script logs in via smb, searches for Microsoft Lync in the registry and gets the version from Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

SYSRET 64-bit operating system privilege escalation vulnerability on Intel CPU hardware

Overview Some 64-bit operating systems and virtualization software running on Intel CPU hardware are vulnerable to a local privilege escalation attack. The vulnerability may be exploited for local privilege escalation or a guest-to-host virtual machine escape. Intel claims that this vulnerability...

CVE-2011-4097

Integer overflow in the oombadness function in mm/oomkill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service memory consumption or process termination by using a certain large amount of memory...

Integer overflow

Integer overflow in the oombadness function in mm/oomkill.c in the Linux kernel before 3.1.8 on 64-bit platforms allows local users to cause a denial of service memory consumption or process termination by using a certain large amount of memory...

FreeBSD Ports: freetype2

The remote host is missing an update to the system as announced in the referenced advisory. VID 462e2d6c-8017-11e1-a571-bcaec565249c OpenVAS Vulnerability Test $ Description: Auto generated from VID 462e2d6c-8017-11e1-a571-bcaec565249c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

DEBIAN-CVE-2012-1131

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to cause a denial of service invalid heap read operation and memory corruption or possibly execute arbitrary code via vectors related to the cell table of a font...

OpenSSL "asn1_d2i_read_bio()" DER格式数据处理漏洞

BUGTRAQ ID: 53158 CVE ID: CVE-2012-2110 OpenSSL是一种开放源码的SSL实现，用来实现网络通信的高强度加密，现在被广泛地用于各种网络应用程序中。 OpenSSL在处理DER格式数据时， "asn1d2ireadbio"函数中存在类型转换错误，可被利用造成堆缓冲区溢出，导致执行任意代码。成功利用的平台为64位系统。 0 OpenSSL 1.x OpenSSL 0.x 厂商补丁： OpenSSL Project --------------- OpenSSL Project已经为此发布了一个安全公告（secadv20120419）以及相应补丁:...

Play [EX] 2.1 Playlist File (M3U/PLS/LST) DoS Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl Play EX 2.1 Playlist File M3U/PLS/LST DoS Exploit Exploit discovered and coded by Death Shadow Dark Tested on Windows 7 Pro 64 bit and Windows XP SP3 Pro Sofware Link http://www.nautrup.com/pex/PlayEXPlayer.html email protected...

Johnny - GUI for John the Ripper

Johnny - GUI for John the Ripper Johnny is a GUI for John the Ripper. It was proposed by Shinnok. s release includes all things from development release plus nice tabbed panel for mode selection and some additional clean-ups. Basic functionality is supposed to work: password could be loaded from...

Microsoft Games Chess.exe DOS PoC

Exploit for windows platform in category dos / poc Exploit Title: Microsoft Games Chess.exe DOS PoC Date: 3/25/2012 Author: Dan Fosco Vendor or Software Link: www.microsoft.com Version: 6.1.7600.16385 Category: dos Google dork: n/a Tested on: Windows 7 SP1 64-bit Greetz: Inj3ct0r Exploit DataBase...

VLC v. 2.0.1.0 .jls DOS

Exploit for windows platform in category dos / poc Exploit Title: VLC v. 2.0.1.0 .jls DOS Date: 3/18/2012 Author: Dan Fosco Vendor or Software Link: www.videolan.org Version: 2.0.1.0 Category: local Google dork: n/a Tested on: Windows XP SP3 64-bit Demo site: n/a Tested on stable 2.0, 1.1.11,...

VLC v. 1.1.11 .nsv DOS

Exploit for windows platform in category dos / poc Exploit Title: VLC v. 1.1.11 .nsv DOS Date: 3/14/2012 Author: Dan Fosco Vendor or Software Link: www.videolan.org Version: 1.1.11 Category: local Google dork: n/a Tested on: Windows XP SP3 64-bit Demo site: n/a include int main FILE f; f =...

VLC v. 1.1.11 .mxf Memory Corruption

Exploit for windows platform in category local exploits Exploit Title: VLC v. 1.1.11 .mxf Memory Corruption Date: 3/14/2012 Author: Dan Fosco Vendor or Software Link: www.videolan.org Version: 1.1.11 Category: local Google dork: n/a Tested on: Windows XP SP3 64-bit Demo site: n/a include int main...

Microsoft Adds New Exploit Mitigations to IE 10

Windows 8 is still off on the horizon somewhere, but the new version of Internet Explorer that’s coming with it–IE 10–already is in consumer preview and it includes some major changes to the exploit mitigations. In addition to the existing implementations of ASLR, DEP and others technologies in...

EbizCare => SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================== + Exploit Title: EbizCare = SQL Injection Vulnerability + Date: March 05, 2012 + Author: dbx + Vendor or Software Link: http://www.ebizcare.com/ + Category: WebApps + Google dork:...

Privilege escalation

afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode, which allows local users to...

Microsoft Visio Viewer VSD File Format CVE-2012-0138 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Microsoft Visio Viewer VSD File Format CVE-2012-0019 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Microsoft Visio Viewer VSD File Format CVE-2012-0020 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Debian Security Advisory DSA 2337-1 (xen)

The remote host is missing an update to xen announced via advisory DSA 2337-1. OpenVAS Vulnerability Test $Id: deb23371.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2337-1 xen Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...