10422 matches found
CVE-2012-0008
CVE-2012-0008 affects Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 via an untrusted search path vulnerability that allows local privilege escalation when a Trojan horse add-in is loaded from an arbitrary directory. The underlying issue is improper validation/loading of add-ins in the Visu...
Microsoft Fixes Critical RDP Vulnerability with March Patch Tuesday
Microsoft rolled out six patches addressing seven vulnerabilities on Tuesday, including a critical hole in Windows’ Remote Desktop Protocol RDP – the same component exploited by the Morto worm in August. The March edition of their monthly Patch Tuesday release included a critical bulletin MS12-02...
MS12-021: Vulnerability in Visual Studio Could Allow Elevation of Privilege (2651019)
The installed version of Microsoft Visual Studio does not properly validate add-ins in the path before loading them into the application. An attacker can elevate his privileges by placing a specially crafted add-in in the path used by Visual Studio and convincing a user with higher privileges to...
MS12-021: Vulnerability in Visual Studio could allow elevation of privilege: March 13, 2012
Resolves security vulnerabilities that exist in Visual Studio that could allow arbitrary code to run when a maliciously modified add-in is added in the path used by Visual Studio.IntroductionMicrosoft has released security bulletin MS12-021. You can view the complete security bulletin by visiting...
Microsoft Visual Studio Add-In Local Privilege Escalation Vulnerability
Description Microsoft Visual Studio is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Microsoft Visu...
Microsoft Visual Studio Add-In Insecure Library Loading (MS12-021; CVE-2012-0008)
An elevation of privilege vulnerability has been reported in Microsoft Visual Studio...
Microsoft Releases March Security Bulletin
Microsoft has released updates to address vulnerabilities in Microsoft Windows, Visual Studio, and Express Design as part of the Microsoft Security Bulletin Summary for March 2012. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or opera...
Jhwebstudio Cross Site Scripting
Exploit Title : jhwebstudio Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.jhwebstudio.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork...
DJ Studio Pro 5.1 .pls Stack Buffer Overflow
This module exploits a stack-based buffer overflow in DJ Studio Pro 5.1.6.5.2. When handling a .pls file, DJ Studio will copy the user-supplied data on the stack without any proper bounds checking done beforehand, therefore allowing code execution under the context of the user. This module requir...
DJ Studio Pro 5.1 .pls Stack Buffer Overflow
Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
DJ Studio Pro 5.1 .pls Stack Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DJ Studio Pro 5.1...
DJ Studio Pro 5.1 - '.pls' Local Stack Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DJ Studio Pro 5.1...
BackTrack 5 R2 Released, New Kernel, New Tools
BackTrack 5 R2 Released, New Kernel, New Tools Hacker are your Ready ? Backtrack 5 R2 finally released with bug fixes, upgrades, and the addition of 42 new tools. With the best custom-built 3.2.6 kernel, the best wireless support available at maximum speed. This release have included Metasploit...
DJ Studio Pro 5.1.6.5.2 SEH Exploit MSF
Exploit for windows platform in category local exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH) (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DJ Studio Pr...
DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH) (Metasploit)
DJ Studio Pro 5.1.6.5.2 - Local Overflow SEH Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
DJ Studio Pro 5.1.6.5.2 Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'DJ Studio Pr...
Advantech Studio ISSymbol ActiveX Buffer Overflow
Overview This advisory is a follow-up to the original alert titled ICS-ALERT-11-131-01 - Advantech Studio ISSymbol ActiveX Buffer Overflow Vulnerabilities that was published May 11, 2011, on the ICS-CERT web page. A remote attacker could exploit these vulnerabilities; publicly available exploit...
Adobe Shockwave Player远程内存破坏漏洞
BUGTRAQ ID: 52006 CVE ID: CVE-2012-0759,CVE-2012-0766,CVE-2012-0764,CVE-2012-0757,CVE-2012-0763,CVE-2012-0762,CVE-2012-0761 Adobe Shockwave Player是播放使用Director Shockwave Studio制作的网页的外挂软件。 Adobe Shockwave Player在实现上存在远程内存破坏漏洞，攻击者可利用此漏洞执行任意代码。 0 Adobe Shockwave Player 11.x Adobe Shockwave Player 10...
Bart`s CMS - SQL Injection Vulnerability
Title: ====== Barts CMS - SQL Injection Vulnerability Date: ===== 2012-01-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=390 VL-ID: ===== 390 Introduction: ============= It is a website Content Management System that is build with Codecharge Studio. There will also ...