Apple iTunes < 12.4 DLL Injection Arbitrary Code Execution (uncredentialed check)

The version of Apple iTunes running on the remote Windows host is prior to 12.4. It is, therefore, affected by a DLL Dynamic Link Library injection vulnerability in the setup component that is triggered when running the installer from an untrusted directory. An attacker can exploit this...

Microsoft JScript and VBScript Scripting Engine Memory Corruption Vulnerability

Microsoft Internet Explorer IE is a web browser developed by Microsoft and is the default browser that comes with the Windows operating system.JScript is one of the interpreted object-based scripting languages.VBScript engines are one of the... VBScript engine. A memory corruption vulnerability...

Microsoft Windows Journal Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.Windows Journal is one of the electronic journal applications. A memory corruption vulnerability exists in Microsoft Windows Journal. A remote attacker can exploit this vulnerability by means of a specially designed journal...

Microsoft Browser Memory Corruption Vulnerability (CNVD-2016-03018)

Microsoft Internet Explorer IE and Edge are both web browsers developed by Microsoft Corporation, U.S.A. IE was the default browser that came with operating systems prior to Windows 10, and Edge is the default browser that comes with the latest operating system, Windows 10. A memory corruption...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-02235)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in Microsoft Edge that originates when a program improperly accesses a memory object. A remote attacker can exploit the...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-02240)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A far-memory corruption vulnerability exists in Microsoft Office, which stems from the program failing to...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-02218)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security vulnerability exists in Microsoft Edge, which can be exploited by remote attackers to execute arbitrary code in the current user context and corrupt...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-02236)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in Microsoft Edge that originates when a program improperly accesses a memory object. A remote attacker can exploit the...

Microsoft Browser Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

Adobe Creative Cloud Node.js Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Creative Cloud. Authentication is not required to exploit this vulnerability. The application exposes a services that listens on a random TCP port. The lack of authentication in the exposed...

Microsoft Browser Memory Corruption Vulnerability (CNVD-2016-01574)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities

Exploit for php platform in category web applications Administrator optionsModify Current Theme" or use site.com/members/console.php?cID=61. You can then insert the PHP code of your choosing into Footer. In order to add or edit code you are required to provide a special Admin Key that was defined...

Microsoft Windows Journal Memory Corruption Vulnerability

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in the handling of constructed Journal files in Microsoft Windows, which can be successfully exploited to allow an attacker to execute arbitrary code in the current user context...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-01005)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office software, which stems from the program...

Microsoft Windows PDF Library Remote Code Execution Vulnerabilities (3138938)

This host is missing a critical security update according to Microsoft Bulletin MS16-012 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Oracle GoldenGate File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle GoldenGate. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GoldenGate mgr process, which listens on TCP port 7809. By default, the process...

The vulnerability of the Windows operating system allows a remote attacker to execute arbitrary code with privileges of the current user.

The Windows operating system contains a vulnerability related to the incorrect processing of specially crafted graphic files in the EMF format. Exploiting this vulnerability can allow an unauthorized intruder to execute arbitrary code with privileges of the current user...

(0Day) Microsoft Office Excel Binary Worksheet Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Browser Memory Corruption Vulnerability (CNVD-2015-08111)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Microsoft Browser Memory Corruption Vulnerability (CNVD-2015-08112)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....