Microsoft Windows JavaScript Regular Expression Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to search and replac...

Empire: a PowerShell post-exploitation Agent tools-vulnerability warning-the black bar safety net

Empire is a purely PowerShell post-exploitation Agent tools, it is built on cryptography, secure communications and flexible architecture. Empire realize the need to powershell. exe you can run a PowerShell proxy function. Rapid deployment post-exploit module, from the keyboard recorder to...

Oracle Patches VENOM Vulnerability

Oracle, whose virtualization software VirtualBox is among those affected by the VENOM vulnerability, on Saturday joined the litany of VM providers that have patched the bug. Oracle was one of the first vendors notified by Crowdstrike, whose researcher Jason Geffner found the bug and disclosed it...

Microsoft Windows Kernel 'Win32k.sys' local elevation of privilege vulnerability (CNVD-2015-01104)

Microsoft Windows is a popular operating system. A security vulnerability in Microsoft Windows 'Win32k.sys' handling of in-memory objects allows local attackers to exploit the vulnerability to elevate privileges and execute arbitrary code in kernel context...

Skeleton Key Malware Bypasses Active Directory Authentication

Enterprise Active Directory administrators need to be on the lookout for anomalous privileged user activity after the discovery of malware capable of bypassing single-factor authentication on AD that was used as part of a larger cyberespionage campaign against a global company based in London...

Windows Escalate UAC Protection Bypass (In Memory Injection)

This Metasploit module will bypass Windows UAC by utilizing the trusted publisher certificate through process injection. It will spawn a second shell that has the UAC flag turned off. This Metasploit module uses the Reflective DLL Injection technique to drop only the DLL payload binary instead of...

CVE-2013-1333

Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka "Win32k Buffer Overflow Vulnerability."...

SuSE Update for java-1_6_0-openjdk openSUSE-SU-2013:0312-1 (java-1_6_0-openjdk)

Check for the Version of java-160-openjdk OpenVAS Vulnerability Test $Id: gbsuse201303121.nasl 8494 2018-01-23 06:57:55Z teissa $ SuSE Update for java-160-openjdk openSUSE-SU-2013:0312-1 java-160-openjdk Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH,...

SuSE 11.2 Security Update : Java 1.6.0 (SAT Patch Number 7332)

java-160-openjdk based on Icedtea6-1.12.2 was released, fixing various security issues : New in release 1.12.2 2012-02-03 : - Security fixes - S6563318, CVE-2013-0424: RMI data sanitization - S6664509, CVE-2013-0425: Add logging context - S6664528, CVE-2013-0426: Find log level matching its name ...

Powershell .NET Compiler

This module will build a .NET source file using powershell. The compiler builds the executable or library in memory and produces a binary. After compilation the PowerShell session can also sign the executable if provided a path the a .pfx formatted certificate. Compiler options and a list of...

IBM solidDB Detection (local check)

The remote Windows host is running IBM solidDB, an in-memory database application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid53811; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12"; scriptnameenglish:"IBM solidDB...

BodgeIt Store : Vulnerable Web Application For Penetration Testing !

BodgeIt Store : Vulnerable Web Application For Penetration Testing ! Features Easy to install – just requires java and a servlet engine, e.g. Tomcat Self contained no additional dependencies other than to 2 in the above line Easy to change on the fly – all the functionality is implemented in JSPs...

Windows Escalate UAC Protection Bypass (In Memory Injection)

This module will bypass Windows UAC by utilizing the trusted publisher certificate through process injection. It will spawn a second shell that has the UAC flag turned off. This module uses the Reflective DLL Injection technique to drop only the DLL payload binary instead of three separate binari...

Dissecting the ZeroAccess Rootkit

The ZeroAccess rootkit isn’t the most well-known or closely watched piece of malware in recent history, but, as an extremely detailed new analysis of the program shows, it is a perfect example of the kind of sophisticated malware that attack crews are using to maintain persistent, silent access t...

CVE-2010-0910

Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 and 11.2.1.4.1 allows remote attackers to affect availability via unknown vectors...

Buffer overflow

Unspecified vulnerability in the Data Server component in Oracle TimesTen In-Memory Database 7.0.6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-0910

CVE-2010-0910 affects Oracle TimesTen In-Memory Database Data Server in versions 7.0.6.0 and 11.2.1.4.1. Description and connected materials indicate an unspecified vulnerability in the Data Server component that can be exploited remotely to impact availability via unknown vectors. The vulnerabil...

CVE-2010-0873

CVE-2010-0873 affects Oracle TimesTen In-Memory Database Data Server (TimesTen Data Server) 7.0.6.0. The vulnerability is remotely exploitable over TCP/IP (network), with no authentication, and has a CVSS v2 base score of 10.0 (Confidentiality, Integrity, and Availability all Complete). The issue...

feedDemon 3.1.0.9 - .opml File Buffer Overflow

feedDemon 3.1.0.9 - .opml File Buffer Overflow /Download latest vuln app :http://www.newsgator.com/Individuals/FeedDemon/Default.aspx This exploit identifies your OS and searches in memory for a RETCODE thus working 100%./ include include include include void banner; void exploitchar; void...

Oracle TimesTen In-Memory数据库远程拒绝服务漏洞

BUGTRAQ ID: 37522 Oracle TimesTen In-Memory Database是优化了内存的关系数据库系统。 TimesTen In-Memory数据库的timestend守护程序没有正确的处理HTTP请求，远程攻击者可以通过向TCP 17000端口发送超长的HTTP请求导致服务崩溃。 Oracle TimesTen In-Memory Database 7.0.5 厂商补丁： Oracle ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.oracle.com "GET...