1939 matches found
The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.
The vulnerability of the Windows operating system exists due to incorrect handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...
The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.
The vulnerability of the Windows operating system exists due to incorrect handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...
The vulnerability of the Windows operating system allows a malicious attacker to execute a special application with privileges of the current user.
The Microsoft Windows operating system contains a vulnerability related to the presence of unauthorized tasks in the system. This vulnerability allows a malicious individual to execute a specially crafted application with privileges of the current user. If successful, the perpetrator will be able...
Microsoft Office Excel Viewer Remote Code Execution Vulnerabilities (3038999)
This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Office Excel Remote Code Execution Vulnerabilities (3038999)
This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2015-01059)
Microsoft Internet Explorer is a popular WEB browser. A remote memory corruption vulnerability exists in Microsoft Internet Explorer, which could be exploited by an attacker to execute arbitrary code in the context of the currently logged in user, or to launch a denial of service attack...
Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0020)
A use after free vulnerability exists, where Internet Explorer attempts use a CTreeNode object that has been deleted. This vulnerability could be leveraged to execute arbitrary code in the context of the current user...
Microsoft Word Style Tag Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...
(Pwn2Own) Microsoft Windows DirectShow Privilege Escalation Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling o...
AIX 5.1 Bellmail Local Race Condition Exploit Exploit
No description provided by source. -bash-2.05b$ -bash-2.05b$ cat xaix5bellmail.pl !/usr/bin/perl FileName: xaix5bellmail.pl Exploit Race condition vulnerability BUGTRAQ ID: 8805 of /usr/bin/bellmail command on Aix5 to change any file owner to current user. Usage : xaix5bellmail.pl aimfile aimfile...
Microsoft Outlook Express 5.5/6.0 S/MIME Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5944/info Microsoft Outlook Express contains an unchecked buffer in the code that generates warning messages when certain error conditions associated with digital signatures are encountered. Execution of arbitrary code in...
用友某通用系统sql注入
简要描述： 用友某通用系统注入 详细说明： 用友TurboCRM存在通用sql注入。 http://220.178.27.116:8001/background/recievesms.php?ID=1 ID参数未做过滤存在mssql timebased盲注。 sqlmap.py -u "http://220.178.27.116:8001//background/recievesms.php?ID=1" --dbs --current-user --current-db --is-dba master model msdb tempdb turbocrm70 UFDATA0012011...
SolarWinds Server and Application Monitor Apex Stack Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Server and Application Monitor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...
Microsoft Internet Explorer Memory Corruption (MS14-010: CVE-2014-0283)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Internet Explorer Memory Corruption (MS14-010; CVE-2014-0284)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Microsoft Internet Explorer Memory Corruption (MS13-080: CVE-2013-3874)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a victim to view a specially crafted website with an affecte...
Hewlett-Packard LoadRunner lrFileIOService ActiveX Control WriteFileString Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard LoadRunner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Oracle Endeca Server attachDataStore SOAP Request Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Endeca Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of requests to the controlSoapBinding web service. This service exposes...
Oracle Java t2k Type1 Subroutine Indexing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
VulnCheck KEV: CVE-2013-1347
This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer...