Cisco WebEx One-Click Client Password Encryption - Information Disclosure

// source: https://www.securityfocus.com/bid/61304/info Cisco WebEx One-Click Client is prone to an information disclosure vulnerability. Successful exploits may allow an attacker to disclose sensitive information such as stored passwords; this may aid in further attacks. / WebEx One-Click Regist...

Israeli Government Websites Targeted in Watering Hole Attack

A new watering hole attack has been reported, this one targeting two government-related websites based in Israel that have been injected with malware exploiting a six-month-old vulnerability in Internet Explorer. The two sites, ict.org.il and herzliyaconference.org, are related to Israel’s first...

Zoner Photo Studio 15 Buffer Overflow Vulnerability

Zoner Photo Studio 15 builds 2 and 3 suffer from a stack-based buffer overflow vulnerability. Full proof of concept code included. 1. ADVISORY INFORMATION ----------------------- Product: Zoner Photo Studio Vendor URL: www.zoner.com Type: Stack-based Buffer Overflow CWE-121 Date found: 2012-10-17...

Zoner Photo Studio 15 Buffer Overflow

Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: Zoner Photo Studio Vendor URL: www.zoner.com Type: Stack-based Buffer Overflow CWE-121 Date found: 2012-10-17 Date published: 2012-11-09 CVSSv2 Score: 4,4 AV:L/AC:M/Au:N/C:P/I:P/A:P CVE: - 2...

Deeply Flawed Apple-Owned Fingerprint Reader Software a Tough Fix

Now that word is out on a serious password bug in the ubiquitous UPEK Protector Suite fingerprint readers found in most new laptops today, Apple-owned Authentec surely will be able to fix the issue on the double. Not so fast, says one of the researchers looking at the problem. “It’s a system that...

SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability (BEAST)

A vulnerability exists in SSL 3.0 and TLS 1.0 that could allow information disclosure if an attacker intercepts encrypted traffic served from an affected system. TLS 1.1, TLS 1.2, and all cipher suites that do not use CBC mode are not affected. This plugin tries to establish an SSL/TLS remote...

BulletProof FTP Client 2010 - Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc Title: ====== BulletProof FTP Client 2010 - Buffer Overflow Vulnerability Introduction: ============= BPFTP Client is a fully automated FTP client, with many advanced features including automatic download resuming, leech mode, ftp search and much...

BulletProof FTP Client 2010 - Buffer Overflow Vulnerability

Document Title: =============== BulletProof FTP Client 2010 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=475 Release Date: ============= 2012-04-01 Vulnerability Laboratory ID VL-ID: ====================================...

7-Technologies AQUIS Unspecified Path Subversion Arbitrary DLL Injection Code Execution

Binary data scadaaquis15.nbin...

DNS does not start on Microsoft Windows Server 2008 Domain Controllers

Challenge Cause The Surebackup Domain Controller can't communicate with the replication partners before loading the zone. Solution There is a Microsoft registry key that should be modified only on the Virtual Machines inside the SureBackup job due to the nature of the key. Open Regedit Browse to...

OpenDrive 1.3.141 - Local Password Disclosure

/ Title: OpenDrive include include int ReadRegistryKey LPBYTE lpBuffer, LPDWORD lpBufferSize, HKEY hKey, LPCTSTR lpszSubKey, LPCTSTR lpszValueName HKEY hKeyLocal; int nType; if RegOpenKeyExhKey, lpszSubKey, 0, KEYREAD, &hKeyLocal == ERRORSUCCESS if RegQueryValueEx hKeyLocal, lpszValueName, 0,...

OpenDrive 1.3.141 - Local Password Disclosure

OpenDrive 1.3.141 - Local Password Disclosure / Title: OpenDrive include include int ReadRegistryKey LPBYTE lpBuffer, LPDWORD lpBufferSize, HKEY hKey, LPCTSTR lpszSubKey, LPCTSTR lpszValueName HKEY hKeyLocal; int nType; if RegOpenKeyExhKey, lpszSubKey, 0, KEYREAD, &hKeyLocal == ERRORSUCCESS if...

CVE-2011-0037

Microsoft Malware Protection Engine before 1.1.6603.0, as used in Microsoft Malicious Software Removal Tool MSRT, Windows Defender, Security Essentials, Forefront Client Security, Forefront Endpoint Protection 2010, and Windows Live OneCare, allows local users to gain privileges via a crafted val...

Microsoft Windows SMB Registry : Win 7 / Server 2008 R2 Service Pack Detection

It is possible to determine the Service Pack version of the Windows 7 / Server 2008 R2 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52459; scriptversion"1.9";...

MS KB2491888: Microsoft Malware Protection Engine (MMPE) Privilege Escalation

A vulnerable version of Microsoft Malware Protection Engine MMPE is installed on the remote system. MMPE is typically included with Microsoft anti-malware products such as Windows Live OneCare, Microsoft Security Essentials, Microsoft Forefront Client Security, Microsoft Forefront Client Security...

Microsoft Issues Fix for Bug in Malware Protection Engine

Microsoft has issued an update to its core malware protection engine that fixes a bug that could allow an attacker to gain LocalSystem privileges on a vulnerable machine if a specific set of odd conditions exist. The vulnerability in the Microsoft Malware Protection Engine is a privilege-escalati...

CVE-2010-3961

The Consent User Interface UI in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka...

Consent User Interface Privilege Escalation Vulnerability (2442962)

This host is missing a critical security update according to Microsoft Bulletin MS10-100. OpenVAS Vulnerability Test $Id: secpodms10-100.nasl 5361 2017-02-20 11:57:13Z cfi $ Consent User Interface Privilege Escalation Vulnerability 2442962 Authors: Veerendra GG Copyright: Copyright c 2010 SecPod,...

PT-2010-5474 · Microsoft · Windows Xp +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows XP SP4, Windows Server 2003 SP3, Windows Vista SP3, Windows Server 2008 SP3, and Windows 7 SP1 Description: An elevation of privilege issue exists due to the improper interaction of drivers with the...

Microsoft Windows RtlQueryRegistryValues() does not adequately validate registry data

Overview Microsoft Windows does not adequately validate registry data read using the function RtlQueryRegistryValues. By modifying an EUDC registry key value, a local user could execute arbitrary code with SYSTEM privileges. Description Microsoft Windows supports end-user-defined characters EUDC ...