AgataSoft Auto PingMaster 1.5 - Buffer Overflow (SEH)

Exploit Title: AgataSoft Auto PingMaster 1.5 - Buffer Overflow SEH Date: 2018-08-03 Exploit Author: bzyo Twitter: @bzyo Vulnerable Software: AgataSoft Auto PingMaster 1.5 Vendor Homepage: http://agatasoft.com/ Version: 1.5 Software Link : http://agatasoft.com/PingMaster.exe Tested Windows 7 SP1 x...

Security update for python (moderate)

This update for python fixes the following issues: The following security vulnerabilities were addressed: - Add a check to Lib/wave.py that verifies that at least one channel is provided. Prior to this, attackers could cause a denial of service via a crafted wav format audio file. bsc1083507,...

Splinterware System Scheduler Pro 5.12 - Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: Splinterware System Scheduler Pro 5.12 - Local Buffer Overflow SEH Vulnerable Software: System Scheduler Pro 5.12 Vendor Homepage: https://www.splinterware.com Version: 5.12...

Splinterware System Scheduler Pro 5.12 Buffer Overflow

!/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: Splinterware System Scheduler Pro 5.12 - Local Buffer Overflow SEH Date: 07-21-18 Vulnerable Software: System Scheduler Pro 5.12 Vendor Homepage: https://www.splinterware.com Version: 5.12 Software Link:...

Description of the Security and Quality Rollup updates for .NET Framework 3.5.1 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4338423)

Description of the Security and Quality Rollup updates for .NET Framework 3.5.1 for Windows 7 SP1 and Server 2008 R2 SP1 KB 4338423 Summary This security update resolves the following vulnerabilities: A "remote code execution" vulnerability exists when .NET Framework does not validate input...

Description of the Security Only update for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1 and Server 2008 (KB 4338602)

Description of the Security Only update for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1 and Server 2008 KB 4338602 Summary This security update resolves the following vulnerabilities: A "remote code execution" vulnerability exists when .NET Framework does not validate input...

Description of the Security and Quality Rollup updates for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1, and Server 2008 (KB 4338417)

Description of the Security and Quality Rollup updates for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1, and Server 2008 KB 4338417 Summary This security update resolves the following vulnerabilities: A "remote code execution" vulnerability exists when .NET Framework does not valida...

Description of the Security Only update for .NET Framework 3.5.1 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4338612)

Description of the Security Only update for .NET Framework 3.5.1 for Windows 7 SP1 and Server 2008 R2 SP1 KB 4338612 Summary This security update resolves the following vulnerabilities: A "remote code execution" vulnerability exists when .NET Framework does not validate input correctly. An attack...

AnyDesk Desktop < 4.1.3 DLL Preloading Privilege Escalation Vulnerability - Windows

AnyDesk Desktop is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:anydesk:anydesk...

Remote Code Execution (RCE) Via Memory Corruption

microsoft.chakracore is vulnerable to remote code execution via memory corruption vulnerability. This happens when an attacker inputs a large numeric or spread array literal to ByteCodeGenerator, leading to an out-of-bounds write. This CVE ID is different from CVE-2017-11886, CVE-2017-11889,...

Security feature bypass

AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability...

CVE-2018-13102

AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability...

CVE-2018-13102

CVE-2018-13102 affects AnyDesk on Windows (pre-4.1.3, i.e., before 12.06.2018). The issue is DLL preloading in AnyDesk on Windows 7 SP1, enabling local privilege escalation. The OpenVAS entry and related records describe it as a privilege-escalation vulnerability, with the root cause being DLL pr...

CVE-2018-7783

CVE-2018-7783 affects Schneider Electric SoMachine Basic prior to v1.6 SP1. The vulnerability is an XML External Entity (XXE) flaw triggered by unsanitized input to the XML parser, enabling disclosure/retrieval of arbitrary data on the affected node via an out-of-band (OOB) attack. Affected produ...

Trend Micro OfficeScan Multiple Vulnerabilities (1119961)

Trend Micro OfficeScan is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE Security Update : mariadb (openSUSE-2018-668)

This update for MariaDB to version 10.0.35 fixes multiple issues: Security issues fixed : - CVE-2018-2782: Unspecified DoS vulnerability in InnoDB bsc1090518 - CVE-2018-2784: Unspecified DoS vulnerability in InnoDB bsc1090518 - CVE-2018-2787: Unspecified vulnerability in InnoDB allowing writes...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1761-1)

The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2018-3665: Prevent disclosure of FPU registers including XMM and AVX registers between processes. These registers might contain encryption keys when...

Audiograbber 1.83 - Local Buffer Overflow (SEH) Exploit

Exploit for windows platform in category local exploits Exploit Title: Audiograbber 1.83 - Local Buffer Overflow SEH Exploit Author: Dennis 'dhn' Herrmann Vendor Homepage: https://www.audiograbber.org/ Version: 1.83 Tested on: Windows 7 SP1 x86 !/usr/bin/env python $Id: exploit.py,v 1.0 2018/06/1...

Audiograbber 1.83 - Local Buffer Overflow (SEH)

Exploit Title: Audiograbber 1.83 - Local Buffer Overflow SEH Date: 2018-06-16 Exploit Author: Dennis 'dhn' Herrmann Vendor Homepage: https://www.audiograbber.org/ Version: 1.83 Tested on: Windows 7 SP1 x86 !/usr/bin/env python $Id: exploit.py,v 1.0 2018/06/16 13:25:59 dhn Exp $ Tested with Window...

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2018-641)

This update for java-180-openjdk to version 8u171 fixes the following issues : These security issues were fixed : - S8180881: Better packaging of deserialization - S8182362: Update CipherOutputStream Usage - S8183032: Upgrade to LittleCMS 2.9 - S8189123: More consistent classloading - S8189969,...