CVE-2012-0136

CVE-2012-0136 concerns Microsoft Visio Viewer (2010 Gold and SP1). The flaw arises during parsing of Visio files where crafted attributes trigger a memory corruption, enabling remote code execution. Multiple sources concur it affects the Visio Viewer/Visio File Format handling and ties to MS12-01...

CVE-2012-0019

Microsoft Visio Viewer 2010 Gold and SP1 contains a memory corruption vulnerability in the handling of VSD file parsing, enabling remote code execution. The issue affects Visio Viewer components and is linked to the MS12-015 bulletin; Microsoft released a patch addressing these vulnerabilities. C...

CVE-2012-0138

CVE-2012-0138 affects Microsoft Visio Viewer 2010 Gold and SP1. The vulnerability arises from improper memory handling while parsing Visio files, allowing remote code execution via crafted attributes in a VSD file. Microsoft issued MS12-015 to address these Visio parsing memory corruption flaws (...

CVE-2012-0020

Microsoft Visio Viewer 2010 Gold/SP1 and related Visio components are affected by a memory-corruption vulnerability when parsing VSD files, enabling remote code execution via crafted attributes. The issue covers multiple CVEs (CVE-2012-0019, -0020, -0136, -0137, -0138) and is addressed by Microso...

Gold Coast Web Design SQL Injection

Title: Gold Coast Web Design SQL Injection Author: AngelParrot Date: 2011/12/19 Category: Webapps Vendor: http://goldcoastwebdesign.com/ Google Dork: inurl:php?id= intext:"web site by: goldcoastwebdesign.com" Exploit http://example.com/news.php?MenuID=SQL...

IpSwitch WhatsUp Gold TFTP Directory Traversal

This modules exploits a directory traversal vulnerability in IpSwitch WhatsUp Gold's TFTP service. Module Options msf use auxiliary/scanner/tftp/ipswitch/whatsupgoldtftp msf undefinedwhatsupgoldtftp show actions ...actions... msf undefinedwhatsupgoldtftp set ACTION msf undefinedwhatsupgoldtftp sh...

Ipswitch TFTP Server 1.0.0.24 - Directory Traversal

Ipswitch TFTP Server 1.0.0.24 - Directory Traversal Title : Ipswitch TFTP Server Directory Traversal Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.whatsupgold.com/index.aspx Advisory : http://secpod.org/blog/?p=424...

PT-2011-3551 · Microsoft · Windows Vista +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 Description: A remote code execution issue exists due to an integer overflow in the TCP/IP implementation, allowing...

CVE-2011-1896

Cross-site scripting XSS vulnerability in Microsoft Forefront Unified Access Gateway UAG 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "ExcelTable Reflected XSS Vulnerability."...

Design/Logic Flaw

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

PT-2011-3443 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1...

CVE-2011-0664

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP...

CVE-2011-1235

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

Null pointer dereference

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...

PT-2011-2546 · Microsoft · Windows Xp +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 SP1 Microsoft Windows 7 versions Gold through SP1...

New Malware, JKDDOS, Targets Commodities Investment Firms

Researchers at Arbor Networks say they have discovered unique samples of a new family of malware that is targeting large investmen firms with holdings in the commodities markets, especially the mining industry. The malware, dubbed ‘JKDDOS,’ is used to launch distributed denial of service DDOS...

Richard Kirk hacked into more than 300 eBay users' e-mail & PayPal accounts !

Richard Kirk Kirk hacked into more than 300 eBay users' e-mail accounts after cracking their passwords. He then was able to steal money from his victims' usually secure PayPal accounts. He transferred money from PayPal into hundreds of his own accounts, and then used the stolen cash to buy valuab...

Viscom VideoEdit Gold ActiveX 8.0 Remote Code Execution Exploit

Exploit for windows platform in category local exploits =============================================================== Viscom VideoEdit Gold ActiveX 8.0 Remote Code Execution Exploit =============================================================== // Ctrl+C Ctrl+V, herpderp // calc.exe var...

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution // Ctrl+C Ctrl+V, herpderp // calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+...

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution

// Ctrl+C Ctrl+V, herpderp // calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...