MS14-036: Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (2967487)

The version of Microsoft's Graphics Component installed on the remote host is affected by code execution vulnerabilities due to the way GDI+ handles image record types in specially crafted files. A remote, unauthenticated attacker could exploit these issues by tricking a user into viewing content...

Security Update for Windows 8 (KB2862973)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Microsoft XML Core Services CVE-2014-1816 Information Disclosure Vulnerability

Description Microsoft XML Core Services MSXML is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Technologies Affected Avaya Aura Conferencing 6.0 Avaya Aura Conferencing 6.0 SP1 Standar...

KLA10013 OSI vulnerability in multiple Microsoft XML Core Services

By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited from the network at a point related to MSXML via a specially designed website. It is caused by a missing property information restriction. Original advisories MS Bulletin...

Microsoft Windows Remote Desktop Protocol CVE-2014-0296 Security Bypass Vulnerability

Description Microsoft Windows Remote Desktop Protocol is prone to a security-bypass vulnerability. Successful exploits may allow an attacker to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Windows...

Microsoft Windows Graphics Component CVE-2014-1818 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura Conferencing 6.0 SP1...

An Overview of KB2871997

An Overview of KB2871997 Microsoft recently released KB2871997 for Windows 7, Windows 8, Windows Server 2008R2, and Windows Server 2012. This blog will give an overview of the feature changes, their impact, and some important configuration changes that can be made in conjunction with the update t...

Advance Notification Service for the June 2014 Security Bulletin Release

Today we provide advance notification for the release of seven Bulletins, two rated Critical and five rated Important in severity. These Updates are for Microsoft Windows, Microsoft Office and Internet Explorer. The Update for Internet Explorer addresses CVE-2014-1770, which we have not seen used...

undefinedImpressCMS 1.3.6.1 Cross Site Scriptingundefined

Exploit Title: ImpressCMS 1.3.6.1 Reflected XSS Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL : http://www.impresscms.org Software Link: http://www.impresscms.org/content.php?page=Download Vuln Category: CWE-79 XSS Tested on: ImpressCMS 1.3.6.1 Tested Local Platform : XAMP on Windows ...

Microsoft Internet Explorer 11 - WeakMap Integer Divide-by-Zero

Microsoft Internet Explorer 11 - WeakMap Integer Divide-by-Zero var a = new WeakMap; a.pushnew WeakMap; a1.seta0, a1; a0.deletea0; ,1::TryGetValueAndRemove+0x1f: 668756f0 f736 div eax,dword ptr esi ds:002b:04598cc8=00000000 --...

AuraCMS 3.0 Cross Site Scripting / Local File Inclusion

Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS 3.0 Tested Local Platform : XAMP on...

AuraCMS 3.0 - Multiple Vulnerabilities

AuraCMS 3.0 - Multiple Vulnerabilities Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS...

Flying Cart Cross Site Scripting

Cross Site Scripting on Online Store Flying Cart Risk: Low CWE number: CWE-79 Date: 19/05/2014 Vendor: Flying Cart Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php?p=xss PoC: -Target:...

Artikel CMS Cross Site Scripting

Cross Site Scripting on Artikel CMS Risk: Low CWE number: CWE-79 Date: 19/05/2014 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php?action=xss PoC: -Target: www.pontonmade.com -Vuln. File:...

ClassAd Cross Site Scripting

Cross Site Scripting on ClassAd Risk: Low CWE number: CWE-79 Date: 19/05/2014 Vendor: projects-and-software.de Version:3.00 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: showads.php Exploit: http:/host/path/showads.php?catid=xss PoC: -Targe...

China Bans Microsoft Windows 8 for Government Computers

While US government is always prohibiting the purchase of Huawei products due to suspected backdoors from the Chinese government, China also keep itself totally apart from the US productions. China is a bit famous for using its own operating systems, smartphone application services and lots more,...

Easy File Management Web Server Stack Buffer Overflow

Easy File Management Web Server v4.0 and v5.3 contains a stack buffer overflow condition that is triggered as user-supplied input is not properly validated when handling the UserID cookie. This may allow a remote attacker to execute arbitrary code. Module Options msf use...

Perseus' Java Hopper Cross Site Scripting

Cross Site Scripting on Perseus' Java Hopper Risk: Low CWE number: CWE-79 Date: 19/05/2014 Project: perseus.tufts.edu Download: sourceforge.net/projects/perseus-hopper Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: morph?l= Exploit:...

Wireshark 1.10.7 - Denial of Service (PoC)

!/usr/bin/python Exploit Title: Wireshark Read Access Violation near NULL starting at libcairo2!cairoimagesurfacegetdata Date: May 15th 2014 Author: Osanda Malith Jayathissa E-Mail: osandajayathissagmail.com Version: 1.10.7 32-bit and 64-bit Vendor Homepage: http://www.wireshark.org Tested on:...

Wireshark 1.10.7 - Denial of Service (PoC)

Wireshark 1.10.7 - Denial of Service PoC !/usr/bin/python Exploit Title: Wireshark Read Access Violation near NULL starting at libcairo2!cairoimagesurfacegetdata Date: May 15th 2014 Author: Osanda Malith Jayathissa E-Mail: osandajayathissagmail.com Version: 1.10.7 32-bit and 64-bit Vendor Homepag...