MS11-034: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2506223)

The remote host is running a version of the Windows kernel that is affected by the following types of vulnerabilities : - Several use-after-free vulnerabilities exist due to the way that Windows kernel-mode drivers manage kernel-mode driver objects. CVE-2011-0662, CVE-2011-0665, CVE-2011-0666,...

CVE-2011-1183

Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: this vulnerability exists because of an incorrect fix for...

Design/Logic Flaw

Apache Tomcat 7.0.11, when web.xml has no login configuration, does not follow security constraints, which allows remote attackers to bypass intended access restrictions via HTTP requests to a meta-data complete web application. NOTE: this vulnerability exists because of an incorrect fix for...

Microsoft Word .docx Insecure Library Loading (MS11-023; CVE-2011-0107)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been reported in the way that Microsoft Word handles the loading of DLL files. The vulnerability is caused when Microsoft Office Word incorrectly restricts the path used for loading external libraries...

PT-2011-2925 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A regression in a previous fix caused security constraints to be ignored under certain conditions. Specifically, this occurred when there was no login...

Adobe Flash Player Malformed Number Arguments Memory Corruption (APSB11-02; CVE-2011-0578)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient type checking by the Adobe Flash Player. A remote attacker may exploit this iss...

iOS myDBLite 1.1.10 - Directory Traversal

iOS myDBLite 1.1.10 - Directory Traversal Exploit Title : myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sp@2K, Sunlight, H@ckk3y Software Link: http://itunes.apple.com/kr/app/mydb-lite/id335521112?mt=8 Version: 1.1.10 Tested on: iPhone, iP...

Adobe Flash Player ActionScript Atom Value Memory Corruption (APSB11-02; CVE-2011-0574)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient type checking by the Adobe Flash Player. A remote attacker may exploit this iss...

FreeBSD : mediawiki -- multiple vulnerabilities (8d04cfbd-344d-11e0-8669-0025222482c5)

Medawiki reports : An arbitrary script inclusion vulnerability was discovered. The vulnerability only allows execution of files with names ending in '.php' which are already present in the local filesystem. Only servers running Microsoft Windows and possibly Novell Netware are affected. Despite...

Microsoft Windows Kerberos Unkeyed Checksum Local Privilege Escalation Vulnerability

Description The Microsoft Windows implementation of Kerberos is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting these issues will result in the complete compromise of affect...

Search Google Censorship Gently Piracy !

Google was not kidding when he said he would fight against illegal file sharing, and now he died autocomplete when it comes to investigation of piracy. If they were not sure that the digital world has decided this year to piracy, it would be quite clear now. First, Nintendo announces "the golden...

Openfire 3.6.4 Multiple CSRF Vulnerabilities

Exploit for jsp platform in category web applications Project: Openfire Severity: High Versions: 3.6.4 other versions may be affected Exploit type: Multiple CSRF Fixes Available: None ------------------------------------------------------------------------...

Microsoft Graphics Filters FlashPix Converter Buffer Overflow (MS10-105; CVE-2010-3951)

A remote code execution vulnerability has been discovered in the way that Microsoft Office parses specially crafted FlashPix image files. FlashPix is a bitmapped computer graphics file format where the image is saved in more than one resolution. The vulnerability is due to an error in Microsoft...

Microsoft Windows CVE-2010-3941 'Win32k.sys' Double Free Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the 'Win32k.sys' Windows kernel-mode driver. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromi...

Professional Penetration Testing Guide

Here is the another good book in the field of penetration testing. Unlike other books which aims only at the technical aspects of Penetration testing, this one explains every step involved in the making of a Professional Pentester. Rather than just teaching how to use the existing tools, it does...

Cisco Unified Communications Manager 8.0 - Invalid Argument Privilege Escalation

Cisco Unified Communications Manager 8.0 - Invalid Argument Privilege Escalation source: https://www.securityfocus.com/bid/44672/info Cisco Unified Communications Manager is prone to a local privilege-escalation vulnerability. Attackers can exploit this issue to gain administrative access to the...

PT-2010-4669

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2002 SP3 through 2003 SP3 Description A remote code execution issue exists in the way Microsoft Excel handles specially crafted Lotus 1-2-3 workbook files .wk3. This allows remote attackers to execute arbitrary code. A...

Microsoft Windows Media Player RTSP Use after Free Code Execution (MS10-075; CVE-2010-3225)

A remote code execution vulnerability has been reported in Microsoft Windows Media Player network sharing service. The Network Service account is a built-in account that has more access to resources and objects than members of the Users group. Services that run as the Network Service account acce...

Microsoft Windows Print Spooler Service Remote Code Execution Vulnerability (2347290)

This host is missing a critical security update according to Microsoft Bulletin MS10-061. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS10-068: Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)

The version of the Local Security Authority Subsystem Service LSASS installed on the remote Windows host does not properly handle malformed packets in LDAP messages when used in conjunction with Microsoft Active Directory / Active Directory Application Mode / Active Directory Lightweight Director...