489 matches found
Make hide better web page Trojan horse-vulnerability warning-the black bar safety net
Today, pumping up some time to make a several web page Trojan horse,the effect is not very good,mainly is the hidden poor,easy to be found,pondering one afternoon,finally making a hidden comparison of the ideal web page Trojan. This new web Trojan and other different the suffix is. gif,and unlike...
CVE-2006-3779
Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges...
CVE-2006-3779
Citrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a registry key with an insecure ACL, which allows remote authenticated users to gain privileges...
rasman.pm.txt
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
Teach you to make hide better web page Trojan horse-vulnerability warning-the black bar safety net
Hello everyone. I'm David. Today make a tutorial,name it:teach you to make hide better web Trojan --------------------------------------------------------------------- Today, pumping up some time to make a several web page Trojan horse,the effect is not very good,mainly is the hidden poor,easy to...
MS06-025 Microsoft RRAS Service RASMAN Registry Overflow
This module exploits a registry-based stack buffer overflow in the Windows Routing and Remote Access Service. Since the service is hosted inside svchost.exe, a failed exploit attempt can cause other system services to fail as well. A valid username and password is required to exploit this flaw on...
Dove gray is registered as a system service method-reference for the black hole-vulnerability and early warning-the black bar safety net
A few days ago a pigeon to research registered into the system service method, I don't have pigeons, and found that it is using rundll32 to import an inf to achieve, this should be added a registry key to disable the reg script, disable regedit, are effective? Examples are as follows: Add a...
Cisco Secure ACS for Windows information leak
Administration password and encryption key are insecurely stored in HKEYLOCALMACHINE registry key...
IM Lock protection bypass
Decryptable password is stored in world-readable registry key...
Winamp fails to properly handle playlists with long "file" parameter
Overview Winamp contains a buffer overflow vulnerability when processing a playlist that has a long file parameter. This may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Winamp Winamp is a media player for Microsoft Windows systems. It can...
CVE-2006-0363
MSN Messenger 7.5 stores passwords in an encrypted form under HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds. Local users may recover originals by calling CryptUnprotectData (as demonstrated by the MSN Password Recovery.exe tool). The issue highlights that decryption methods and keys resi...
CVE-2006-0363
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEYCURRENTUSER\Software\Microsoft\IdentityCRL\Creds registry key, which might allow local users to obtain the original passwords via a program that calls CryptUnprotectData, as demonstrated ...
Hack the door cracks（crack installed-the vulnerability warning-the black bar safety net
Some time ago, to see someone in order to hack hack the door to the server end of a password, also specially made a program Haven't come across more than my first, so there is no concern Today good luck, hit one. Oh Start also thinking about how to crack its password: The Read password program id...
CVE-2003-1276
Netfone.exe of NetTelephone 3.5.6 uses weak encryption for user PIN's and stores user account numbers in plaintext in the HKEYCURRENTUSER\Software\MediaRing.com\SDK\NetTelephone\settings registry key, which could allow local users to gain unauthorized access to NetTelephone accounts...
CVE-2005-3474
The CVE-2005-3474 entry concerns the aries.sys driver in Sony First4Internet XCP DRM software. The driver hides any file, registry key, or process whose name begins with "$sys$", enabling an attacker to conceal activity on a system using XCP. Affected component: aries.sys within the XCP DRM stack...
CVE-2005-2120
Stack-based buffer overflow in the Plug and Play PnP service UMPNPMGR.DLL in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" backslash characters in a registry key name, which triggers the overflow i...
CVE-2005-2120
CVE-2005-2120 is a stack-based buffer overflow in the Windows Plug and Play (PnP) service (UMPNPMGR.DLL) on Windows 2000 SP4 and Windows XP SP1/SP2. The overflow occurs when processing a registry key name containing a large number of backslashes, triggered in wsprintfW, allowing remote or local a...
CVE-2005-2120
Stack-based buffer overflow in the Plug and Play PnP service UMPNPMGR.DLL in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" backslash characters in a registry key name, which triggers the overflow i...
Microsoft Windows Plug and Play Registry Key Buffer Overflow (MS05-047; CVE-2005-2120)
Plug and Play PnP allows the operating system to detect new hardware e.g a mouse, a digital camera when you install it on a system A vulnerability was detected in the PnP service for several Microsoft Windows operating systems that can allow remote attackers to execute arbitrary code via a crafte...