Windows ‘Deletebug’ Zero-Day Allows Privilege Escalation, Destruction

A proof-of-concept exploit for a Windows zero-day that works on fully patched Windows 10 machines has been released by a security researcher. It allows an attacker to delete any kind of file on a victim machine, including system data. The flaw no CVE has been assigned since it was just exposed on...

Hacker Discloses New Windows Zero-Day Exploit On Twitter

A security researcher with Twitter alias SandboxEscaper—who two months ago publicly dropped a zero-day exploit for Microsoft Windows Task Scheduler—has yesterday released another proof-of-concept exploit for a new Windows zero-day vulnerability. SandboxEscaper posted a link to a Github page hosti...

Microsoft Windows: Service: Windows Media Player Network Sharing Service

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmediaplayernetsharing.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Windows Media Player Network Sharing Service WMPNetworkSvc Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Hacker compromised user data & illegally used car sharing service 33 times

By Waqas A 37-year old IT security researcher and self-confessed computer hacker This is a post from HackRead.com Read the original post: Hacker compromised user data & illegally used car sharing service 33 times...

Password reset Vulnerability in Facebook Employees Secure Files Transfer service

Many be many of you are not aware about this, but Facebook having a Secure Files Transfer service for their Employees at https://files.fb.com and Hacker reported a very critical password reset vulnerability. Nir Goldshlager, a researcher told 'The Hacker News' that how he defeat Facebook's Secure...

BitTorrent / uTorrent Detection

The remote host is running BitTorrent or uTorrent, peer-to-peer file sharing applications. Note that, due to the peer-to-peer nature of these applications, any user connecting to the BitTorrent network may consume a large amount of bandwidth. C Tenable Network Security, Inc. include"compat.inc";...

Microsoft Windows Media Player网络共享服务RTSP释放后使用漏洞（MS10-075）

BUGTRAQ ID: 43776 CVE ID: CVE-2010-3225 Windows Media Player是微软操作系统中默认捆绑的媒体播放器。 Windows Media Player对同一网络中其他设备的流媒体支持方式存在释放后使用漏洞。如果向播放器的流媒体服务例程发送了特制的RTSP请求，播放器就会释放一个对象之后再重新使用，这可能导致执行任意代码。 Microsoft Windows Media Player 11 临时解决方法： 在受影响的系统上禁用Windows媒体播放器网络共享服务。 交互方法 1...

CVE-2010-3225

Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote attackers to execute arbitrary code via a crafted Real Time Streaming Protocol RTSP packet, aka "RTSP Use After Free Vulnerability."...

CVE-2010-3225

CVE-2010-3225 is a use-after-free vulnerability in the Windows Media Player Network Sharing Service that can allow remote code execution when a specially crafted RTSP packet is processed. It affects Windows Vista (SP1/SP2) and Windows 7, with exploitation via RTSP requests and no user interaction...

CVE-2010-3225

Use-after-free vulnerability in the Media Player Network Sharing Service in Microsoft Windows Vista SP1 and SP2 and Windows 7 allows remote attackers to execute arbitrary code via a crafted Real Time Streaming Protocol RTSP packet, aka "RTSP Use After Free Vulnerability."...

Microsoft Windows Media Player Network Sharing Remote Code Execution Vulnerability (2281679)

This host is missing a critical security update according to Microsoft Bulletin MS10-075. OpenVAS Vulnerability Test $Id: secpodms10-075.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Media Player Network Sharing Remote Code Execution Vulnerability 2281679 Authors: Antu Sanadi Copyright:...

MS10-075: Vulnerability in Media Player Network Sharing Service Could Allow Remote Code Execution (2281679)

A use-after-free vulnerability exists in the Microsoft Windows Media Player Network Sharing Service installed on the remote host. By sending a specially crafted Real Time Streaming Protocol RTSP packet to the affected service, a remote attacker may be able to leverage this vulnerability to execut...

PT-2010-4662 · Microsoft · Windows Media Player +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Player Network Sharing Service versions prior to the fixed version Description: A use-after-free issue in the Media Player Network Sharing Service allows remote attackers to execute arbitrary code via a crafted Real Ti...

Preemptive Protection against Microsoft Windows 'ipnathlp.dll' Denial of Service Vulnerability

A denial of service vulnerability was detected in Microsoft Windows NAT Helper, a component of the Internet Connection Sharing service on Microsoft Windows XP. A remote attacker can exploit this vulnerability to terminate NT services on a target system...

High Risk Vulnerability in Lexmark Printer Sharing Service

Peter Winter-Smith of NGSSoftware has discovered a high risk vulnerability in the Lexmark Printer Sharing service which could allow a remote, unauthenticated attacker to execute arbitrary code on a Lexmark printer user's computer system with Local System privileges. There is no known official pat...

AppleShare IP Server status query

File sharing service is available. Description : The remote host is running an AppleShare IP file service. By sending DSIGetStatus request on tcp port 548, it was possible to disclose information about the remote host. OpenVAS Vulnerability Test $Id: asip-status.nasl 7000 2017-08-24 11:51:46Z...

RHEL 3 : samba (RHSA-2004:064)

Updated Samba packages that fix a security vulnerability are now available. Samba provides file and printer sharing services to SMB/CIFS clients. The Samba team discovered an issue that affects version 3.0.0 and 3.0.1 of Samba. If an account for a user is created, but marked as disabled using the...

Apple Filing Protocol Server Detection

The remote service understands the Apple Filing Protocol AFP and responds to a 'FPGetSrvrInfo' 'DSIGetStatus' request with information about itself. AFP is used to offer file services for Mac OS X as well as the older Mac OS. In the past, it has also been known as 'AppleTalk Filing Protocol' and...