10205 matches found
Microsoft Word Record RTF Parsing Engine Remote Heap Buffer Overflow Vulnerability
Description Microsoft Word is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed...
Microsoft Windows Movie Maker Remote Buffer Overflow Vulnerability
Description Microsoft Windows Movie Maker is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will cause a denial-of-service condition. Technologies Affect...
Microsoft Excel 'PivotTable Cache Data' Record Parsing Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability because it fails to properly bounds-check user-supplied input. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to...
Adobe Acrobat and Reader Font Parsing Remote Code Execution Vulnerability
Description Adobe Acrobat and Reader are prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. The following products are...
How to Own a Database With SQL Injection
SQL injection is the most common penetration technique employed by hackers to steal valuable information from corporate databases. Yet, as widespread as this method of attack is, a seemingly infinite number of ‘sub-methods,’ or variations of SQL Injection attacks can be carried out against the...
CVE-2005-2612
creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16895 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wplastpostexec.rb 2025-02-06 03:13:38+00:00| seen|...
CVE-2006-5745
creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16532 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms06071xmlcore.rb 2025-02-06 03:13:38+00:00| see...
CVE-2005-3757
creationtimestamp| type| source ---|---|--- 2010-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16907 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/googleproxystylesheetexec.rb 2025-02-06...
CVE-2007-0882
creationtimestamp| type| source ---|---|--- 2010-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16328 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/solaris/telnet/fuser.rb 2024-02-14 17:16:45+00:00| seen|...
CVE-2005-3155
creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16480 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/mailenablew3cselect.rb 2025-02-06 03:13:38+00:00|...
Microsoft Excel 'ExternName' Record Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...
Microsoft Windows Kernel 'Win32k.sys' TrueType Font Parsing Code Execution Vulnerability
Description Microsoft Windows is prone to a local code-execution vulnerability. This issue affects the Windows kernel and arises when TrueType fonts are parsed. Successfully exploiting this issue will allow an attacker to execute arbitrary code with kernel-level privileges, completely compromisin...
Microsoft Excel RTD Records Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel '.xls' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running...
Internet Explorer and SharePoint 'toStaticHTML' Cross Domain Information Disclosure Vulnerability
Description Microsoft Internet Explorer and Microsoft SharePoint are prone to a cross-domain information-disclosure vulnerability because they fail to properly enforce the same-origin policy. An attacker can exploit this issue to access local files or content from a browser window in another doma...
SA-CONTRIB-2010-051 - Heartbeat - Cross Site Scripting
The Heartbeat project contains a suite of modules to display user activity on a website. These modules do not properly sanitize some of their output, allowing certain users the ability to insert arbitrary HTML and script code. Such a cross site scripting XSS attack may lead to a malicious user...
CVE-2004-1388
creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16853 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/gpsdformatstring.rb 2025-02-06 03:13:38+00:00| seen|...
CVE-2007-2508
creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16829 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16828 2018-05-29 15:50:33+00:00| seen|...
CVE-2002-1123
creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16398 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/mssql/ms02056hello.rb 2025-02-06 03:13:37+00:00| seen|...
Hyper Text Caching Protocol (HTCP) Detection
The remote service supports the Hyper Text Caching Protocol HTCP, used for discovering HTTP caches and cached data, managing sets of HTTP caches, and monitoring cache activity. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45608; scriptversion"1.5";...
Adobe Acrobat and Reader CLOD Mesh Declaration Block Heap Buffer Overflow Vulnerability
Description Adobe Acrobat and Reader are prone to a heap-based buffer-overflow vulnerability because they fail to properly validate user-supplied input. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will resu...