Microsoft Internet Information Services (IIS) Multiple Vulnerabilities (Q327696, MS02-062)

Microsoft Internet Information Services IIS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS Windows (keybd_event) Local Privilege Elevation Exploit

Exploit for unknown platform in category local exploits ========================================================== MS Windows keybdevent Local Privilege Elevation Exploit ========================================================== / Microsoft Windows keybdevent validation vulnerability. Local...

[Full-disclosure] Microsoft Windows keybd_event validation vulnerability

Vulnerability: Microsoft Windows keybdevent validation vulnerability. Type:......... Design Flaw Vendor:....... Microsoft Impact:....... Local Privilege Elevation. Credits:...... AndrTarascaT4r @ Haxorcitos.comhttp://Haxorcitos.com .......I Lopez ilo @ reversing.org http://reversing.org...

MS Windows Plug-and-Play Service Remote Universal Expl (spanish fix)

Exploit for unknown platform in category remote exploits ======================================================================= MS Windows Plug-and-Play Service Remote Universal Exploit spanish fix ======================================================================= /...

MS Windows Plug-and-Play Service Remote Universal Exploit (french fix)

No description provided by source. / HOD-ms05039-pnp-expl-french.c 25.Aug.2005 Very slightly modified version by Fabrice MOURRON [email protected] Tested on Win2k SP4 Frencg Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus...

MS Windows Plug-and-Play Service Remote Universal Expl (french fix)

Exploit for unknown platform in category remote exploits ====================================================================== MS Windows Plug-and-Play Service Remote Universal Exploit french fix ====================================================================== / HOD-ms05039-pnp-expl-french...

Microsoft Windows Plug-and-Play Service (French) - Remote Universal (MS05-039)

Microsoft Windows Plug-and-Play Service French - Remote Universal MS05-039 / HOD-ms05039-pnp-expl-french.c 25.Aug.2005 Very slightly modified version by Fabrice MOURRON Tested on Win2k SP4 Frencg Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c...

Microsoft Windows Plug-and-Play Service (French) - Remote Universal (MS05-039)

/ HOD-ms05039-pnp-expl-french.c 25.Aug.2005 Very slightly modified version by Fabrice MOURRON Tested on Win2k SP4 Frencg Original credits & comments follow. / / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote...

Microsoft Windows Plug-and-Play Service - Remote Universal (MS05-039)

Microsoft Windows Plug-and-Play Service - Remote Universal MS05-039 / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...

Microsoft Windows Plug-and-Play Service - Remote Universal (MS05-039)

/ HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::. --------------------------------------------------------------------- Description: A remot...

CVE-2005-0058

CVE-2005-0058 describes a buffer overflow in the Windows Telephony API (TAPI) that can allow either remote code execution or local privilege elevation, depending on OS/version and configuration. Affected platforms include Windows 98/98 SE/ME, Windows 2000, Windows XP, and Windows Server 2003. The...

isec-0023-coredump.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, since it became clear from the discussion in January about the uselib vulnerability, that the Linux community prefers full, non-embargoed disclosure of kernel bugs, I release full details right now. However to follows at least some of the...

FreeBSD : phpbb -- privilege elevation and path disclosure (53e711ed-8972-11d9-9ff8-00306e01dda2)

The phpbb developer group reports : phpBB Group announces the release of phpBB 2.0.13, the 'Beware of the furries' edition. This release addresses two recent security exploits, one of them critical. They were reported a few days after .12 was released and no one is more annoyed than us, having to...

MS05-034: Cumulative Update for ISA Server 2000 (899753)

The remote host is missing a cumulative update for ISA Server 2000 that fixes several security flaws that could allow an attacker to elevate his privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18487; scriptversion"1.37"; scriptcvsdate"Date: 2018/11/15...

Linux kernel ELF core dump privilege elevation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, since it became clear from the discussion in January about the uselib vulnerability, that the Linux community prefers full, non-embargoed disclosure of kernel bugs, I release full details right now. However to follows at least some of the...

Multiple ceterm terminal emulator multiple vulnerabilities

Elevated privileges are not correctly dropped...

Microsoft Windows Kernel Vulnerability

Overview A privilege elevation vulnerability exists in the way that the Windows' kernel processes certain access requests. This vulnerability could allow a logged on user to take complete control of the system. Description A locally authenticated user could potentially exploit a vulnerability in...

Microsoft font processing buffer overflow vulnerability

Overview A privilege elevation vulnerability exists in the way that Microsoft Windows processes certain fonts. This vulnerability could allow a logged on user to take complete control of the system. Description Due to an unchecked buffer in the processing of malicious fonts, a locally authenticat...

Microsoft Client Server Runtime System Vulnerability

Overview The Microsoft Client Server Runtime System CSRSS incorrectly validates certain messages potentially resulting in privilege elevation. Description CSRSS is the user-mode part of the Win32 subsystem. Win32.sys is the kernel-mode portion of the Win32 subsystem. The Win32 subsystem must be...

iDEFENSE Security Advisory 04.07.05: SGI IRIX gr_osview Information Disclosure Vulnerability

SGI IRIX grosview Information Disclosure Vulnerability iDEFENSE Security Advisory 04.07.05 http://www.idefense.com/application/poi/display?type=vulnerabilities April 7, 2005 I. BACKGROUND The grosview application is a setuid root application that provides a graphical display of usage of certain...