Bloodshed Dev-C++ 4.9.9.2 - Multiple EXE Loading Arbitrary Code Executions

Bloodshed Dev-C++ 4.9.9.2 - Multiple EXE Loading Arbitrary Code Executions // source: https://www.securityfocus.com/bid/42737/info Bloodshed Dev-C++ is prone to a vulnerability that lets attackers execute arbitrary code. This issue affects 'make.exe' and 'minw32-make.exe'. An attacker can exploit...

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution

Acunetix Web Vulnerability Scanner - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/42697/info Acunetix Web Vulnerability Scanner is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate...

ACROS Security: Remote Binary Planting in Apple iTunes for Windows (ASPR #2010-08-18-1)

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-08-18-1 ------------------------------------------------------------------------- ASPR 2010-08-18-1: Remote Binary Planting in Apple iTunes for Windows...

VMware Products Tools Remote Code Execution Vulnerabilies (win)

The host is installed with VMWare products and are prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbvmwareprdtstoolscodeexecvulnwin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Tools Remote Code Execution Vulnerabilities win Authors: Antu Sanadi...

VMware Products Tools Remote Code Execution Vulnerabilies (win)

The host is installed with VMWare products and are prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbvmwareprdtstoolscodeexecvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Tools Remote Code Execution Vulnerabilities win Authors: Antu Sanadi...

ACROS Security: Remote Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-1)

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-04-12-1 ------------------------------------------------------------------------- ASPR 2010-04-12-1: Remote Binary Planting in VMware Tools for Windows...

CVE-2010-1141

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x before 2.0.2 build 203138; VMware Fusion 2.x before 2.0.6 build 246742; VMware ESXi 3.5 and 4.0; and VMware ESX 2.5.5,...

VMSA-2010-0007:VMware hosted products, vCenter Server and ESX patches resolve multiple security issues

VMSA-2010-0007.1 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0007.1 VMware Security Advisory Synopsis: VMware hosted products, vCenter Server and ESX patches resolve multiple...

Microsoft Windows SMB Shares Unprivileged Access

The remote host has one or more Windows shares that can be accessed through the network with the given credentials. Depending on the share rights, it may allow an attacker to read/write confidential data. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid42411;...

IBM Installation Manager URI Handling Argument Injection Vulnerability - Windows

IBM Installation Manager is prone to an argument injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Installation Manager URI Handling Argument Injection Vulnerability (Windows)

This host has IBM Installation Manager installed and is prone to Argument Injection vulnerability. OpenVAS Vulnerability Test $Id: gbibminstallmanagerarginjvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ IBM Installation Manager URI Handling Argument Injection Vulnerability Windows Authors: Antu...

Google Apps mailto uri handler cross-browser remote command execution

Exploit for unknown platform in category remote exploits ===================================================================== Google Apps mailto uri handler cross-browser remote command execution ===================================================================== Title: Google Apps mailto uri...

PT-2007-6950 · Invensys · Invensys Wonderware Intouch

Name of the Vulnerable Software and Affected Versions: Invensys Wonderware InTouch version 8.0 Description: The issue allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs due to insecure permissions set on a NetDDE share. Recommendations: For Invensys...

Design/Logic Flaw

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions world readable for a configuration file with network share credentials, which allows local users to...

CVE-2007-2360

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the...

CVE-2007-2361

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions world readable for a configuration file with network share credentials, which allows local users to...

Default credentials

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the...

CVE-2007-2360

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the...

CVE-2007-2361

CVE-2007-2361 affects Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery and BackupExec System Recovery prior to 20070426. When remote backups of restore points are configured, a configuration file containing network share credentials is world-readable, allowing local users to read...

CVE-2007-2361

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore points images are configured, uses weak permissions world readable for a configuration file with network share credentials, which allows local users to...