Useresponse 1.0.2 - Privilege Escalation Remote Code Execution

Useresponse 1.0.2 - Privilege Escalation Remote Code Execution !/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.co...

Apple iTunes '.m3u' Playlist Code Execution Vulnerability (Mac OS X)

This host is installed with Apple iTunes and is prone to code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbappleitunesplaylistcodeexecvulnmacosx.nasl 5956 2017-04-14 09:02:12Z teissa $ Apple iTunes '.m3u' Playlist Code Execution Vulnerability Mac OS X Authors: Rachana Shetty...

CVE-2012-2369

Format string vulnerability in the logmessagecb function in otr-plugin.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format string specifiers in data that generates a log message...

CVE-2012-1144

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via a crafted TrueType font...

CVE-2012-0171: Improper Control of Generation of Code

Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "SelectAll Remote Code Execution Vulnerability."...

MSCOMCTL.OCX Killbit: bdd1f04b-858b-11d1-b16a-00c0f0283628 (MS12-027; CVE-2012-0158)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in an ActiveX control. To trigger this issue, an attacker can create a malicious web page that initiates the vulnerable ActiveX control. Successful exploitation of this...

CVE-2012-0169: Improper Control of Generation of Code

Microsoft Internet Explorer 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "JScript9 Remote Code Execution Vulnerability."...

Vulnerability in Google Earth Software exposed by longrifle0x

Vulnerability in Google Earth Software exposed by longrifle0x Ucha Gobejishvili, Security researcher also known as Longrifle0x, found another Interesting Security issue in one of the most famous software called, Google Earth. He found a critical code execution vulnerability on google earth softwa...

Microsoft Expression Design Insecure Library Loading (MS12-022; CVE-2012-0016)

A remote code execution vulnerability has been reported in Microsoft Expression Design...

CVE-2012-0011: Improper Control of Generation of Code

Microsoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "HTML Layout Remote Code Execution Vulnerability."...

Scientific Toolworks Understand 'wintab32.dll' DLL Loading Arbitrary Code Execution

The version of Scientific Toolworks Understand installed on the remote Windows host is earlier than 2.6 Build 600. As such, it insecurely looks in its current working directory when resolving DLL dependencies, such as for 'wintab32.dll'. Attackers may exploit this issue by placing a specially...

MPlayer SAMI Subtitle sub_read_line_sami Buffer Overflow

MPlayer is an open source multimedia player that runs on numerous operating systems including Linux, Windows and Mac OS X. Ports also exist for Amazon's Kindle, and the Nintendo Wii. It can play many audio and video formats MPEG, DivX, Ogg, etc. and handle various streaming protocols. A code...

Microsoft Windows TCP/IP Stack Reference Counter Overflow (MS11-083; CVE-2011-2013)

A remote code execution vulnerability has been reported in Microsoft Windows TCP/IP stack...

ProFTPD < 1.3.3g / 1.3.4 Response Pool Use-After-Free Code Execution

The remote host is using ProFTPD, a free FTP server for Unix and Linux. According to its banner, the version of ProFTPD installed on the remote host is earlier than 1.3.3g or 1.3.4. As such, it is potentially affected by a code execution vulnerability due to how the server manages the response po...

CVE-2011-3161

HP Data Protector Notebook Extension contains a remote code execution vulnerability in the dpnepolicyservice component (LogBackupLocationStatus method) that accepts unsafely validated input. This flaw is exploitable without authentication via the DPNECentral Web Service on TCP port 80, enabling a...

Remote code execution

Microsoft Forefront Unified Access Gateway UAG 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka "Poisoned Cup of Code Execution...

XnView may insecurely load executable files

Overview XnView may use unsafe methods for determining how to load executables .exe XnView is a software for viewing and converting graphic files. XnView loads certain executables when using the "Open containing folder" function. XnView contains an issue with the file search path, which may...

Mozilla Firefox - 'nsTreeRange' Dangling Pointer (2)

Advisory : Abysssec Public Exploit : This module exploits a code execution vulnerability in Mozilla Firefox = 3.6.16 caused by nsTreeSelection element. The specific flaw exists within the way Firefox handles user defined functions of a nsTreeSelection element. When executing the function...

PHP code execution vulnerability references summary-vulnerability warning-the black bar safety net

A code execution function In PHP you can execute the Code of the function. Such as eval , assert , theand system and exec and shellexec and passthru and escapeshellcmd and pcntlexec , etc. demo code 1.1: The second file contains the code injection The file containing the function in the specific...

Adobe Flash Player Arbitrary Code Execution Vulnerability (Linux)

This host has Adobe flash Player installed, and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeflashplayercodeexecutionvulnapr11lin.nasl 5424 2017-02-25 16:52:36Z teissa $ Adobe Flash Player Arbitrary Code Execution Vulnerability Linux Authors: Antu Sanadi...