3092 matches found
PT-2010-3512 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 Description: The issue is related to object initialization during error handling, allowing local users to gain privileges via a crafted...
Microsoft Window MPEG Layer-3 Remote Code Execution Vulnerability (2115168)
This host is missing a critical security update according to Microsoft Bulletin MS10-052. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
IBM Solid Database < 6.5 Service Pack 2 Handshake Request Username Field Remote Code Execution
Binary data 5599.prm...
Outlook Web Access 2007 - Cross-Site Request Forgery
Outlook Web Access 2007 - Cross-Site Request Forgery Source: http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails Demo: http://www.youtube.com/watch?v=Bx-zfu0uXYg After Nduja Connection worm and the Memova issue, it's now time to shed a light on vulnerabilities affecting corporat...
Nuance OmniPage 16 Professional installs multiple vulnerable Microsoft runtime libraries
Nuance Communications, Inc. offer on their german web page http://www.nuance.de/kostenlose-ocr-software-test/download.asp a trial version of OmniPage 16 Professional for download. The installer OPPro16TD.exe a self-extracting RAR archive was published "Tue, 30 Jun 2009 14:38:28 GMT" according to...
Microsoft Help Files (.CHM): 'Locked File' Feature Bypass
No description provided by source. Changes made with Windows XP introduced additional origin validation for files downloaded from the Internet when saved to an NTFS volume. This 'feature' is present in Windows XP, Vista and 7. When a user downloads a .CHM file using Internet Explorer or another...
win32/xp sp3 (SPA) URLDownloadToFileA + CreateProcessA + ExitProcess
Exploit for win32 platform in category shellcode ==================================================================== win32/xp sp3 SPA URLDownloadToFileA + CreateProcessA + ExitProcess ==================================================================== !/usr/bin/perl c0d3d by r0i aka d0lc3 Explo...
PT-2010-2965 · Microsoft · Internet Explorer 8 +1
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 versions SP1 through SP3 Description: A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploit...
PT-2010-2966 · Microsoft · Internet Explorer 8 +1
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 versions SP1 through SP3 Description: A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploit...
Gartner to Businesses: Eliminate Windows XP by 2012
As Microsoft prepares to pull the plug on support for Windows XP SP2, a move that stops the release of security updates for that operating system, research firm Gartner is urging businesses to start planning and testing Windows 7 this year with a plan to completely eliminate Windows XP by the end...
End of Support for XP SP2 is End of an Era
Microsoft’s announcement this week that it is preparing to end support for machines running Windows XP SP2 not only represents a challenge for the thousands of businesses still running SP2, but also is the end of an era for both Microsoft and its customers. By the time Microsoft drops support for...
Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)
Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution 981160 Published: April 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Office...
win32/xp sp3 (Ru) cmd 13 bytes
Exploit for win32 platform in category shellcode ============================== win32/xp sp3 Ru cmd 13 bytes ============================== Tested on Windows XP Pro Rus sp3. Probably, will work with any service pack present. 68 636D6420 push 0x20646D63 54 push esp B8 C793C177 mov eax,msvcrt.syste...
Windows Xp Home Edition SP2 English ( calc.exe ) 37 bytes
No description provided by source. / Windows Xp Home edition SP2 english calc.exe 37 bytes shellcode by: Hazem mofeed Aka Hakxer penetration testing labs www.pentestlabs.com / char evil = "\xeb\x16\x5b\x31\xc0\x50\x53\xbb\x8d\x15\x86\x7c\xff\xd3\x31\xc0"...
CastRipper 2.9.6.0 (.wvx) file local BOF 0day exploit
Exploit for unknown platform in category local exploits ====================================================== CastRipper 2.9.6.0 .wvx file local BOF 0day exploit ====================================================== !/usr/bin/python CastRipper 2.9.6.0 .wvx file local BOF 0day by FB1H2S Greetz t...
Microsoft Security Bulletin MS10-006 - Critical Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251)
Microsoft Security Bulletin MS10-006 - Critical Vulnerabilities in SMB Client Could Allow Remote Code Execution 978251 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft Windows. The...
MS10-013: Description of the security update for Quartz: February 9, 2010
None None...
Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability
The host is installed with Microsoft Windows operating system and is prone to Privilege Escalation Vulnerability. This NVT has been replaced by NVT secpodms10-015.nasl OID:1.3.6.1.4.1.25623.1.0.900740. OpenVAS Vulnerability Test $Id: gbmskernelprvescvuln.nasl 5368 2017-02-20 14:34:16Z cfi $...
Multiple Media Player HTTP DataHandler Overflow (iTunes, Quicktime, etc)
Exploit for unknown platform in category dos / poc ======================================================================== Multiple Media Player HTTP DataHandler Overflow iTunes, Quicktime, etc ======================================================================== ScaryMovie Exploit Study By:...
Multiple Media Players ((iTunes / QuickTime) - HTTP DataHandler Overflow
ScaryMovie Exploit Study By: DrIDE October, 2009 There is a widespread failure in the way that .MOV files are handled by the Quicktime Library. I have attempted to compound my findings on this issue. Nearly every .MOV enabled application that I tested fell victim to this exploit. This is a local...