CVE-2011-1884

CVE-2011-1884 describes a use-after-free vulnerability in the Windows kernel‑mode driver component win32k.sys. The flaw arises from incorrect management of driver objects in the Win32k subsystem, enabling a local attacker to gain privileges by running a crafted application. Affected platforms inc...

PT-2011-3443 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1...

PT-2011-3001

Name of the Vulnerable Software and Affected Versions Windows Bluetooth 2.1 Stack versions in Microsoft Windows Vista SP1 and SP2 and Windows 7 Gold and SP1 Description A remote code execution issue exists due to improper access to objects in memory that were not correctly initialized or have bee...

Ileys Technology Inc.. SQL injection flaws and fixes-vulnerability warning-the black bar safety net

Exploit Title : Ileys Technology Inc.. SQL injection Vulnerability + Date : 1 0 June 2 0 1 1 + Author : k's0uR! + Category : WebApps + d0rk : "Site Designed & Developed by: Ileys Technology Inc" + Faceb00k : + Tested on : Windows Xp SP2 ?????????????? + Virus: ??...

CVE-2011-1870: Undefined Security Weakness

Integer overflow in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, allows local users to gain privileges or cause a denial of service memory corruption via a crafted application that triggers an incorrect...

CVE-2011-1882: Undefined Security Weakness

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

Golden FTP 4.70 PASS Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: GoldenFTP 4.70 PASS exploit Date: July 5, 2011 Author: Joff Thyer email protected / / Software Link: http://www.goldenftpserver.com/ Version: 4.70 Tested on: WinXP-SP0/SP2/SP3 CVE: 2006-6576 based on exploit...

SAP Player 0.9 Buffer Overflow

SAP Player 0.9 .m3u universal Diret ret version Author Abhishek Sahni - abhil00703atgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.sorinara.com/sap/sap09.exe Vulnerable versio...

VulnCheck KEV: CVE-2011-1249

The Ancillary Function Driver AFD in afd.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate user-mode input, which allows local users to gain privileges v...

FactoryLink vrn.exe Opcode 9 Buffer Overflow

Exploit for windows platform in category remote exploits $Id: factorylinkvrn09.rb 12998 2011-06-21 21:08:57Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information o...

CVE-2011-0664

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP...

CVE-2011-1280: Exposure of Sensitive Information to an Unauthorized Actor

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

CVE-2011-1872: Undefined Security Weakness

Hyper-V in Microsoft Windows Server 2008 Gold, SP2, R2, and R2 SP1 allows guest OS users to cause a denial of service host OS infinite loop via malformed machine instructions in a VMBus packet, aka "VMBus Persistent DoS Vulnerability."...

CVE-2011-1276: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cau...

CVE-2011-1272: Improper Input Validation

Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record structures during parsing of Excel...

PT-2011-1231

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 Gold Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Description The issue is related to a cross-site scripting XSS...

WinXP sp2/sp3 local to mention the right of 0day-vulnerability warning-the black bar safety net

Microsoft WinXP sp2/sp3 local system privilege escalation exploit Process: Added a new job with job ID = 1 Added a new job with job ID = 2 Added a new job with job ID = 3 Added a new job with job ID = 4 Added a new job with job ID = 5 Added a new job with job ID = 6 Added a new job with job ID = ...

ebusinesslook SQL injection Vulnerability

Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : ebusinesslook.. SQL injection Vulnerability + Date : 10 June 2011 + Author : k's0uR! + Category : WebApps + d0rk : "Design and Developed by ebusinesslook"Or"Developed by eBusinessloo...

7-Technologies IGSS 9 IGSSdataServer .RMS Rename Buffer Overflow

$Id: igss9igssdataserverrename.rb 12886 2011-06-09 06:04:04Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7-Technologies IGSS 9 - IGSSdataServer .Rms Rename Buffer Overflow (Metasploit)

$Id: igss9igssdataserverrename.rb 12886 2011-06-09 06:04:04Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...