3129 matches found
BACnet OPC Client Buffer Overflow Exploit
!/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010 After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to send the exploit code for them to te...
BACnet OPC Client - Local Buffer Overflow (1)
BACnet OPC Client - Local Buffer Overflow 1 !/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010 After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also...
BACnet OPC Client - Local Buffer Overflow (1)
!/usr/bin/python bacnet.py BACnet OPC Client Buffer Overflow Exploit Jeremy Brown 0xjbrown41-gmail-com Sept 2010 After communicating via several emails with the vendor, sharing details about the vulnerability, as well as proof-of-concept code I also offered to send the exploit code for them to te...
PT-2010-2544 · Microsoft · Vista +5
Name of the Vulnerable Software and Affected Versions: Windows Media codecs versions in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 Description: A remote code execution issue exists due to improper handling of crafted media content with MPEG-...
MS10-065: Description of the security update for Internet Information Services ASP: September 14, 2010
None None...
PT-2010-3512 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through SP2 Description: The issue is related to object initialization during error handling, allowing local users to gain privileges via a crafted...
PT-2010-3513 · Microsoft · Windows Vista +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista versions SP1 through SP2 Microsoft Windows Server 2008 versions Gold through R2 Microsoft Windows 7 Description: A denial of service issue exists due to improper validation of access control lists on kernel objects. Th...
Microsoft Windows Kernel Privilege Elevation Vulnerabilities (981852)
This host is missing an important security update according to Microsoft Bulletin MS10-047. OpenVAS Vulnerability Test $Id: secpodms10-047.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Kernel Privilege Elevation Vulnerabilities 981852 Authors: Madhuri D Updated By: Madhuri D on...
Microsoft Window MPEG Layer-3 Remote Code Execution Vulnerability (2115168)
This host is missing a critical security update according to Microsoft Bulletin MS10-052. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
IBM Solid Database < 6.5 Service Pack 2 Handshake Request Username Field Remote Code Execution
Binary data 5599.prm...
Outlook Web Access 2007 - Cross-Site Request Forgery
Outlook Web Access 2007 - Cross-Site Request Forgery Source: http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails Demo: http://www.youtube.com/watch?v=Bx-zfu0uXYg After Nduja Connection worm and the Memova issue, it's now time to shed a light on vulnerabilities affecting corporat...
Nuance OmniPage 16 Professional installs multiple vulnerable Microsoft runtime libraries
Nuance Communications, Inc. offer on their german web page http://www.nuance.de/kostenlose-ocr-software-test/download.asp a trial version of OmniPage 16 Professional for download. The installer OPPro16TD.exe a self-extracting RAR archive was published "Tue, 30 Jun 2009 14:38:28 GMT" according to...
Microsoft Help Files (.CHM): 'Locked File' Feature Bypass
No description provided by source. Changes made with Windows XP introduced additional origin validation for files downloaded from the Internet when saved to an NTFS volume. This 'feature' is present in Windows XP, Vista and 7. When a user downloads a .CHM file using Internet Explorer or another...
win32/xp sp3 (SPA) URLDownloadToFileA + CreateProcessA + ExitProcess
Exploit for win32 platform in category shellcode ==================================================================== win32/xp sp3 SPA URLDownloadToFileA + CreateProcessA + ExitProcess ==================================================================== !/usr/bin/perl c0d3d by r0i aka d0lc3 Explo...
PT-2010-2965 · Microsoft · Internet Explorer 8 +1
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 versions SP1 through SP3 Description: A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploit...
PT-2010-2966 · Microsoft · Internet Explorer 8 +1
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 versions SP1 through SP3 Description: A remote code execution issue exists due to improper initialization or deletion of an object in the IE8 Developer Toolbar, leading to memory corruption. This could be exploit...
Gartner to Businesses: Eliminate Windows XP by 2012
As Microsoft prepares to pull the plug on support for Windows XP SP2, a move that stops the release of security updates for that operating system, research firm Gartner is urging businesses to start planning and testing Windows 7 this year with a plan to completely eliminate Windows XP by the end...
End of Support for XP SP2 is End of an Era
Microsoft’s announcement this week that it is preparing to end support for machines running Windows XP SP2 not only represents a challenge for the thousands of businesses still running SP2, but also is the end of an era for both Microsoft and its customers. By the time Microsoft drops support for...
Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)
Microsoft Security Bulletin MS10-023 - Important Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution 981160 Published: April 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Microsoft Office...
win32/xp sp3 (Ru) cmd 13 bytes
Exploit for win32 platform in category shellcode ============================== win32/xp sp3 Ru cmd 13 bytes ============================== Tested on Windows XP Pro Rus sp3. Probably, will work with any service pack present. 68 636D6420 push 0x20646D63 54 push esp B8 C793C177 mov eax,msvcrt.syste...