107 matches found
Sql injection
SQL injection vulnerability in OpenScape Deployment Service DLS before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-2652
SQL injection vulnerability in OpenScape Deployment Service DLS before 6.x and 7.x before R1.11.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-2652
OpenScape Deployment Service (DLS) vulnerability CVE-2014-2652 in multiple Unify/OpenScape deployments. The issue is a SQL injection in DLS before version 6.x and before 7.x R1.11.3, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component/version de...
Microsoft .NET Deployment Service - IE Sandbox Escape (MS14-009) (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' require 'msf/core/exploit/exe' require 'msf/core/exploit/powershell' class Metasploit3 'dfsvc' = '4.0.30319.17929.17', 'mscorlib' =...
MS14-009 .NET Deployment Service IE Sandbox Escape Exploit
This Metasploit module abuses a process creation policy in the Internet Explorer Sandbox which allows to escape the Enhanced Protected Mode and execute code with Medium Integrity. The problem exists in the .NET Deployment Service dfsvc.exe, which can be run as Medium Integrity Level. Further...
MS14-009 .NET Deployment Service IE Sandbox Escape
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' require 'msf/core/exploit/exe' require 'msf/core/exploit/powershell' class Metasploit3 'dfsvc' = '4.0.30319.17929.17', 'mscorlib' =...
MS14-009 .NET Deployment Service IE Sandbox Escape
This module abuses a process creation policy in Internet Explorer's sandbox, specifically in the .NET Deployment Service dfsvc.exe, which allows the attacker to escape the Enhanced Protected Mode, and execute code with Medium Integrity. This module requires Metasploit:...