TORCS 1.3.2 - .xml File Buffer Overflow SafeSEH Evasion

TORCS 1.3.2 - .xml File Buffer Overflow SafeSEH Evasion / Exploit Title: TORCS Research Team Division Author: Andres Gomez and David Mora a.k.a Mighty-D ... Pwn and beans! Software Link: http://torcs.sourceforge.net/ Version: torcs 1.3.2 Vendor notified: 03/02/2012 Tested on: Windows XP Service...

Microsoft Windows Object Packager Remote Code Execution Vulnerability (2603381)

This host is missing an important security update according to Microsoft Bulletin MS12-002. OpenVAS Vulnerability Test $Id: secpodms12-002.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Object Packager Remote Code Execution Vulnerability 2603381 Authors: Madhuri D Copyright: Copyright c...

Windows server 2008 R1 local DoS

Hi all. Here's a cute little local DoS attack against Windows Server 2008 R1, which will allow any user who can execute unprivileged code to BSoD your server with about three lines of C. I have reported this to Microsoft, but because of the limited scope of the issue - DoS-only, and server 2008 R...

Windows Server 2008 R1 Local Denial of Service

Exploit for windows platform in category dos / poc Hi all. Here's a cute little local DoS attack against Windows Server 2008 R1, which will allow any user who can execute unprivileged code to BSoD your server with about three lines of C. I have reported this to Microsoft, but because of the limit...

Secunia Research: InduSoft ISSymbol ActiveX Control Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 01/09/2011 - InduSoft ISSymbol ActiveX Control Buffer Overflows - ====================================================================== Table of Contents Affected...

Microsoft Data Access Components Remote Code Execution Vulnerabilities (2560656)

This host is missing an important security update according to Microsoft Bulletin MS11-059. OpenVAS Vulnerability Test $Id: secpodms11-059.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Data Access Components Remote Code Execution Vulnerabilities 2560656 Authors: Veerendra GG Copyright: Copyright...

Microsoft Remote Desktop Protocol Denial of Service Vulnerability (2570222)

This host is missing a critical security update according to Microsoft Bulletin MS11-065. OpenVAS Vulnerability Test $Id: secpodms11-065.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Remote Desktop Protocol Denial of Service Vulnerability 2570222 Authors: Madhuri D Copyright: Copyright c 2011...

Microsoft Report Viewer Information Disclosure Vulnerability (2578230)

This host is missing an important security update according to Microsoft Bulletin MS11-067. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2011-3019 · Microsoft · Windows Vista +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 Description: The issue is related to the...

PT-2011-3441 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista versions SP1 and SP2 Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Windows 7 versions Gold and SP1 Description: The issue allows local users to gain...

Description of the System Center Virtual Machine Manager 2008 R2 SP1 hotfix rollup package: July 12, 2011

None None...

MS11-056: Vulnerabilities in Windows CSRSS could allow elevation of privilege: July 12, 2011

None None...

Citrix Provisioning Services OpCode 40020010 Stack Overflow

Added: 07/08/2011 BID: 45914 OSVDB: 70597 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Service 5.6 and prior are vulnerable to a remotely exploitable...

Citrix Provisioning Services OpCode 40020010 Stack Overflow

Added: 07/08/2011 BID: 45914 OSVDB: 70597 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Service 5.6 and prior are vulnerable to a remotely exploitable...

Citrix Provisioning Services OpCode 40020010 Stack Overflow

Added: 07/08/2011 BID: 45914 OSVDB: 70597 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Service 5.6 and prior are vulnerable to a remotely exploitable...

Citrix Provisioning Services OpCode 40020010 Stack Overflow

Added: 07/08/2011 BID: 45914 OSVDB: 70597 Background Citrix Provisioning Services dynamically provisions virtual servers to simplify and streamline server management, while reducing software rollout risk. Problem Citrix Provisioning Service 5.6 and prior are vulnerable to a remotely exploitable...

ManageEngine ServiceDesk Plus 8.0 - Directory Traversal

Google Dork: ie: intitle:ManageEngine ServiceDesk Plus" Author: Keith Lee [email protected], @keith55, http://milo2012.wordpress.com Software Link: http://www.manageengine.com/products/service-desk/91677414/ManageEngineServiceDeskPlus.exe Version: 8.0 Description: Directory traversal...

ManageEngine Service Desk Plus 8.0 Directory Traversal Vulnerability

Exploit for jsp platform in category web applications Google Dork: ie: intitle:ManageEngine ServiceDesk Plus" Author: Keith Lee email protected Software Link: http://www.manageengine.com/products/service-desk/91677414/ManageEngineServiceDeskPlus.exe Version: 8.0 Description: Directory traversal...

Microsoft Windows VBScript implementation file name disclosure vulnerability

Overview The Microsoft Windows VBScript implementation contains a file name disclosure vulnerability. When VBScript is used to load an image file in Internet Explorer, there is a vulnerability where an unauthenticated attacker may confirm the existence of a particular file. Impact As a step prior...

JVN#72586781: ASP.NET vulnerable to cross-site scripting

ASP.NET contains an issue in the escape processes for string output. Web applications that use ASP.NET may contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the...