Microsoft Windows Graphics Device Interface RCE Vulnerability (2876331)

This host is missing a critical security update according to Microsoft Bulletin MS13-089. OpenVAS Vulnerability Test $Id: secpodms13-089.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Graphics Device Interface RCE Vulnerability 2876331 Authors: Shashi Kiran N Copyright: Copyright C 2013...

Microsoft Windows Digital Signatures Denial of Service Vulnerability (2868626)

This host is missing an important security update according to Microsoft Bulletin MS13-095. OpenVAS Vulnerability Test $Id: secpodms13-095.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft Windows Digital Signatures Denial of Service Vulnerability 2868626 Authors: Shashi Kiran N Copyright: Copyright...

CVE-2013-3898

CVE-2013-3898 concerns a memory-address validity issue in Microsoft Hyper-V on Windows 8/Windows Server 2012. The vulnerability allows guest OS users to execute arbitrary code in all guest OS instances or to cause a denial-of-service by crashing the host, via a guest-to-host hypercall with a craf...

MS13-092: Vulnerability in Hyper-V Could Allow Elevation of Privilege (2893986)

The remote host is affected by an elevation of privilege issue in Hyper-V. Successful exploitation of this vulnerability could result elevated privileges, a denial of service DoS condition, or even in arbitrary code being executed as 'System' in another virtual machine on the shared Hyper-V host....

VideoSpirit Lite 1.77 - Local Buffer Overflow (SEH)

VideoSpirit Lite 1.77 - Local Buffer Overflow SEH !/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Lite 1.77 Seh Buffer Overflow Version: Lite 1.77 Date found: 11.11.2013 Exploit Author: metacom Tested on:...

Microsoft Windows XML Digital Signatures CVE-2013-3869 Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails sanitize user-supplied input. An attacker can exploit this issue to cause the affected application to stop responding, denying service to legitimate users. Technologies Affected Avaya CallPilot 4.0...

MS13-092: Vulnerability in Hyper-V could allow elevation of privilege: November 12, 2013

None None...

Microsoft Windows Ancillary Function Driver CVE-2013-3887 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose kernel memory and obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 7 for x64-based Systems SP1 Microsoft...

Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit

Exploit for php platform in category web applications Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit Google Dork: inurl:regenbogenwiese.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Software Name: Regenbogenwiese v1.5 © 2007 by DieKrabbe...

Woltlab Burning Board Regenbogenwiese 2007 Addon - SQL Injection

Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit Google Dork: inurl:regenbogenwiese.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Software Name: Regenbogenwiese v1.5 © 2007 by DieKrabbe Version: 1.5 Tested on: Windows 8/Backtrack !/usr/bin/ruby...

Woltlab Burning Board Regenbogenwiese 2007 Addon - SQL Injection

Woltlab Burning Board Regenbogenwiese 2007 Addon - SQL Injection Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit Google Dork: inurl:regenbogenwiese.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Software Name: Regenbogenwiese v1.5 © 2007 by...

Claroline 1.11.8 Cross Site Scripting Vulnerability

Malicious users can inject JavaScript, HTML. and attacker can steal the session cookie and take over the account. Exploit Title: Claroline 1.11.8 Cross Site Scripting Date: 2013 11 October Author: Arsan Software Homepage: http://www.claroline.net Version : 1.11.8 Security Risk: High Tested on:...

CVE-2013-3894

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted CMAP table in a TrueType font T...

Design/Logic Flaw

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a...

Design/Logic Flaw

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitra...

Privilege escalation

The App Container feature in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to bypass intended access restrictions and obtain sensitive information from a different container via a Trojan horse application, aka "App Container Elevation ...

CVE-2013-3880

The App Container feature in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to bypass intended access restrictions and obtain sensitive information from a different container via a Trojan horse application, aka "App Container Elevation ...

CVE-2013-3128

CVE-2013-3128 describes a vulnerability in OpenType font parsing that affects kernel-mode drivers across multiple Windows editions (XP SP2/3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8, Server 2012, Windows RT) and certain .NET Framework versions. The issue arises in how Ope...

CVE-2013-3195

The DSAInsertItem function in Comctl32.dll in the Windows common control library in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly allocate memory, which allo...

CVE-2013-3880

CVE-2013-3880 affects Windows 8, Windows Server 2012, and Windows RT. The App Container feature in kernel‑mode drivers may be bypassed by a Trojan horse, allowing a container to access sensitive information from another container. This aligns with the MS13‑081 set of Windows kernel‑mode driver vu...