EUVD-2002-1741

Malware in sbrugna...

CVE-2004-2091

Microsoft Baseline Security Analyzer MBSA 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security...

Security Update for Adobe Flash Player: February 11, 2020

Security Update for Adobe Flash Player: February 11, 2020 Summary This security update resolves vulnerabilities in Adobe Flash Player that is installed on any of the Windows operating systems that are listed in the "Applies to" section. To learn more about these vulnerabilities, see...

Security Update for Adobe Flash Player: April 9, 2019

Security Update for Adobe Flash Player: April 9, 2019 Summary This security update resolves vulnerabilities in Adobe Flash Player that is installed on any of the operating systems that are listed in the "Applies to" section. To learn more about these vulnerabilities, see ADV190011. More informati...

Microsoft Baseline Security Analyzer 2.3 XML Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-BASELINE-ANALYZER-v2.3-XML-INJECTION.txt + ISR: Apparition Security + Zero Day Initiative Program Vendor www.microsoft.com Product Microsoft Baseline Security...

Microsoft Baseline Security Analyzer 2.3 - XML External Entity Injection

Title: Microsoft Baseline Security Analyzer 2.3 - XML External Entity Injection Date: 2018-09-08 Author: John Page aka hyp3rlinx Vendor: Microsoft Software link: https://www.microsoft.com/en-us/download/details.aspx?id=7558 Software Version: 2.3 References: ZDI-CAN-6307 References:...

Microsoft Baseline Security Analyzer 2.3 - XML External Entity Injection

Microsoft Baseline Security Analyzer 2.3 - XML External Entity Injection Title: Microsoft Baseline Security Analyzer 2.3 - XML External Entity Injection Date: 2018-09-08 Author: John Page aka hyp3rlinx Vendor: Microsoft Software link: https://www.microsoft.com/en-us/download/details.aspx?id=7558...

Microsoft Baseline Security Analyzer 2.3 - XML External Entity Injection Vulnerability

Exploit for windows platform in category local exploits Title: Microsoft Baseline Security Analyzer 2.3 - XML External Entity Injection Author: John Page aka hyp3rlinx Vendor: Microsoft Software link: https://www.microsoft.com/en-us/download/details.aspx?id=7558 Software Version: 2.3 References:...

Security update for Adobe Flash Player: May 8, 2018

Security update for Adobe Flash Player: May 8, 2018 Summary This security update resolves vulnerabilities in Adobe Flash Player that is installed on any supported edition of Windows Server version 1803, Windows 10 version 1803, Windows Server 2016 Version 1709, Windows 10 version 1709, Windows RT...

SLAD Microsoft Baseline Security Analyzer OS run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenV...

SLAD Microsoft Baseline Security Analyzer OS run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in...

SLAD Microsoft Baseline Security Analyzer ALL run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in...

SLAD Microsoft Baseline Security Analyzer ALL run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenV...

SLAD Netstat -natcp run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in...

SLAD Microsoft Baseline Security Analyzer Updates run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenV...

SLAD Microsoft Baseline Security Analyzer Updates run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in...

SLAD Netstat -natcp run

This script connects to SLAD on a remote host to run remote the Microsoft Baseline Security Analyzer. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenV...

Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729)

Microsoft Security Bulletin MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution 910729 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Publisher Impact of Vulnerability: Remote Code Execution Maximum Severit...

CVE-2002-1762

Microsoft Baseline Security Analyzer MBSA 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java...

CVE-2002-1762

MBSA 1.0 stores security scans in plaintext at C:\Documents and Settings\username\SecurityScans, potentially exposing sensitive system information to users able to run malicious ActiveX/Java content. The provided sources confirm the exact location and plaintext storage, with no additional exploit...