Web Services Management (WS-Man) / Windows Remote Management (WinRM) Detection (HTTP)

HTTP based detection of Web Services Management WS-Man / Windows Remote Management WinRM. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VLC Media Player M3U DoS Vulnerability - Windows

VLC Media Player is prone to denial of service DoS and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

CVE-2013-4702

Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SCApiOperation.php in LOCKON EC-CUBE 2.12.0 through 2.12.5 on Windows allow remote attackers to read arbitrary files via vectors involving a 1 Operation, 2 Service, 3 Style, 4 Validate, or 5 Version value...

MySQL - Stuxnet Technique Windows Remote System

MySQL - Stuxnet Technique Windows Remote System MySQL Scanner & MySQL Server for Windows Remote SYSTEM Level Exploit Version 1.0 By Kingcope In the Year of 2012 https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/23083.zip use this on a fast scan server! How to use...

MySQL - 'Stuxnet Technique' Windows Remote System

MySQL Scanner & MySQL Server for Windows Remote SYSTEM Level Exploit Version 1.0 By Kingcope In the Year of 2012 https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23083.zip use this on a fast scan server! How to use. pnscan: the file "accounts" holds the user/passwo...

NGS00288 Patch Notification: Windows Remote Desktop Memory Corruption Leading to RCE on XP SP3

High Risk Vulnerability in Microsoft Windows Remote Desktop 17 August 2012 Edward Torkington of NCC Group has discovered a High risk vulnerability in Microsoft Windows Remote Desktop Impact: Remote Code Execution Versions affected: Windows XP SP3 An updated version of the software has been releas...

Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability

Document Title: =============== Trojan Poison Ivy 2.3.2 - Critical Null Pointer Vulnerability Release Date: ============= 2011-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 113 Product & Service Introduction: =============================== Poison Ivy is an advance...

UltraFXP v1.07 - Stack Buffer Overflow Vulnerability

Document Title: =============== UltraFXP v1.07 - Stack Buffer Overflow Vulnerability Release Date: ============= 2011-06-19 Vulnerability Laboratory ID VL-ID: ==================================== 162 Product & Service Introduction: =============================== FTP-Client / FXP-Client...

Microsoft Remote Desktop Client Insecure Library Loading (MS11-017; CVE-2011-0029)

The Remote Desktop feature in Windows enables access to all of the programs, resources, and accessories on a user's computer from another Windows-based computer. Once connected, Remote Desktop gives mouse and keyboard control over the computer while showing everything that is happening on the...

Juniper VPN Client rdesktop Click Hack

Juniper VPN client rdesktop clickhack ================================ discovered by [email protected] PRODUCT: Juniper VPN client + Windows remote desktop or console access VERSION AFFECTED: Win Vista/7 + Juniper VPN client all versions EXPOSURE: Remote code execution SYSTEM privileges SYNOPSIS...

SIDVault 2.0e Windows Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ==================================================== SIDVault 2.0e Windows Remote Buffer Overflow Exploit ==================================================== !/usr/bin/python $ ./sidvault.py 192.168.1.131 SIDVault 2.0e Windows Remote Buffe...

CVE-2009-0087

Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in Microsoft Office Word 2000 SP3 and 2002 SP3; allows remote attackers to execute arbitrary code via a crafted Word 6 file...

Type confusion

Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a 1 file:/// or 2 resource: URI with a dangerous extension, followed by a NULL byte %00 and a safer extension, which causes Firefox to treat the requested file...

CVE-2007-3062

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...