CVE-2016-3517

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to PC / Get Shortcut...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to PC / Get Shortcut...

CVE-2016-3517

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to PC / Get Shortcut...

CVE-2016-3519

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to PC / Get Shortcut...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Oracle Agile PLM Component (CNVD-2016-05439)

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle, which provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile PLM Product Lifecycle Management is one of the lifecycle management components. Oracle Agile PLM Product...

PT-2016-5536 · Oracle · Oracle Agile Plm

Name of the Vulnerable Software and Affected Versions: Oracle Agile PLM versions 9.3.4 through 9.3.5 Description: The issue affects the integrity of the system, allowing remote attackers to exploit it via vectors related to PC / Get Shortcut. Recommendations: For versions 9.3.4 and 9.3.5, at the...

Microsoft Windows Media Center - '.MCL' File Processing Remote Code Execution (MS16-059)

Exploit for windows platform in category remote exploits Exploit Title: Microsoft Windows Media Center .MCL File Processing Remote Code Execution Vulnerability MS16-059 Date: May 11th, 2016 Exploit Author: Eduardo Braun Prado Vendor Homepage : http://www.microsoft.com Version: All prior to May...

Microsoft Windows Media Center - '.MCL' File Processing Remote Code Execution (MS16-059)

Exploit Title: Microsoft Windows Media Center .MCL File Processing Remote Code Execution Vulnerability MS16-059 Date: May 11th, 2016 Exploit Author: Eduardo Braun Prado Vendor Homepage : http://www.microsoft.com Version: All prior to May 10th, 2016 update. Tested on: Windows Media Center running ...

Mozilla Firefox Spoofing Vulnerability (CNVD-2016-00905)

Mozilla Firefox on Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in Mozilla Firefox on Android prior to version 44.0. A remote attacker can exploit the vulnerability by spoofing the address bar with a data...

CVE-2016-1940

Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a data: URL that is mishandled during 1 shortcut opening or 2 BOOKMARK intent processing...

Microsoft Windows LNK File Shell Command Trojan

A code execution vulnerability has been reported in Windows Shell. The vulnerability is due to an error in the Windows Shell that fails to properly validate specific parameters when accessing a shortcut file. A remote attacker may exploit this vulnerability via a malicious shortcut file executing...

Cms madesimple 1.11.12 - Persistant XSS / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Author : ZwX Date : 09/02/2015 Download : http://www.cmsmadesimple.fr/telecharger-cms Vendor : http://www.cmsmadesimple.fr/ Tested on : Windows 7 +=====================+ Description : +=====================+ Stored Cross Site Scripting...

openSUSE Security Update : icedtea-web (openSUSE-2015-602)

The icedtea-web java plugin was updated to 1.6.1. Changes included : - Enabled Entry-Point attribute check - permissions sandbox and signed app and unsigned app with permissions all-permissions now run in sandbox instead of not at all. - fixed DownloadService - comments in deployment.properties n...

Yahoo! Messenger Stack Buffer Overflow Vulnerability

Yahoo! Messenger Yahoo! is a set of instant messaging tools launched by the American company Yahoo! A stack buffer overflow vulnerability exists in Yahoo! Messenger versions 11.5.0.228 and earlier, which can be exploited to cause a denial of service or execute arbitrary code via the 'shortcut' or...

[CVE-2 0 1 5-0 0 9 6]Microsoft Windows Shell SMB LNK Code Execution Exploit-vulnerability warning-the black bar safety net

require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::EXE include Msf::Exploit::FILEFORMAT include Msf::Exploit::Remote::SMB::Server::Share attraccessor :exploitdllname def initializeinfo = superupdateinfoinfo, 'Name' = 'Microsoft Windows Shell LN...

Microsoft Windows Shell SMB LNK Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Microsoft Windows Shell LNK Code Execution', 'Description' = %q This module exploits a vulnerability in the MS10-046 patch to abuse...

Microsoft Windows Shell SMB LNK Code Execution Exploit

This Metasploit module exploits a vulnerability in the MS10-046 patch to abuse again the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This creates an SMB resource to provide the payload and the trigger, and generates a LNK file which must be...

Microsoft Windows Shell File Format LNK Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Microsoft Windows Shell LNK Code Execution', 'Description' = %q This module exploits a vulnerability in the MS10-046 patch to abuse...

Microsoft windows DLL Load Arbitrary Code Execution Vulnerability

Microsoft Windows is an operating system developed by Microsoft. Microsoft Windows fails to properly parse shortcuts, allowing attackers to build malicious DLLs that are tricked into being loaded by applications and executed with application privileges...

CVE-2015-0096

CVE-2015-0096 is a Windows DLL search-order/shortcut (LNK) loading vulnerability (MS15-020 family). A crafted LNK with dynamic icon and SpecialFolderDataBlock can bypass earlier whitelisting, causing Windows to load a malicious DLL when icons are rendered (e.g., in Explorer), potentially executin...