Null pointer dereference

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application that triggers a NULL pointer...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2506223)

This host is missing a critical security update according to Microsoft Bulletin MS11-034. OpenVAS Vulnerability Test $Id: secpodms11-034.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2506223 Authors: Veerendra GG Copyright: Copyright c...

MS11-034: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2506223)

The remote host is running a version of the Windows kernel that is affected by the following types of vulnerabilities : - Several use-after-free vulnerabilities exist due to the way that Windows kernel-mode drivers manage kernel-mode driver objects. CVE-2011-0662, CVE-2011-0665, CVE-2011-0666,...

Pligg CMS 1.1.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became...

Nokia N97 - '.m3u' Playlist Crash (PoC)

!/usr/bin/perl Title : Nokia N97 PlayList M3U Crash PoC Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : hardware Impact : Crashs & Reboot Some Times Rebooted Tested on : Nokia N97 v 22.0.110 Type RM-505...

GAzie 5.10 (Login parameter) Multiple Vulnerabilities

Exploit for php platform in category web applications GAzie 5.10 Login parameter Multiple Remote Vulnerabilities Vendor: Antonio de Vincentiis Product web page: http://www.devincentiis.it, http://gazie.sourceforge.net Affected version: 5.10 Summary: GAzie is a multi-company management program ERP...

GAzie 5.10 - Login Multiple Vulnerabilities

GAzie 5.10 - Login Multiple Vulnerabilities GAzie 5.10 Login parameter Multiple Remote Vulnerabilities Vendor: Antonio de Vincentiis Product web page: http://www.devincentiis.it, http://gazie.sourceforge.net Affected version: 5.10 Summary: GAzie is a multi-company management program ERP that runs...

GAzie 5.10 (Login parameter) Multiple Remote Vulnerabilities

Summary GAzie is a multi-company management program ERP that runs on Apache web server with support for PHP and Mysql database. Open Source web-based application for small and medium enterprises. Description GAzie is prone to a cross-site scripting and an SQL Injection vulnerability because it...

Unfixed XSS vulnerability at www.soldes-de-folie.com

Security researcher Xylitol, has submitted on 30/01/2011 a cross-site-scripting XSS vulnerability affecting www.soldes-de-folie.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/11/2011. It is...

Unfixed XSS vulnerability at www.bancodevenezuela.com

Security researcher Th3xin0x, has submitted on 28/01/2011 a cross-site-scripting XSS vulnerability affecting www.bancodevenezuela.com, which at the time of submission ranked 9812 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

SuSE 10 Security Update : Novell ipsec tools (ZYPP Patch Number 6306)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

Unfixed XSS vulnerability at www.vvd.nl

Security researcher DexTeR, has submitted on 17/12/2010 a cross-site-scripting XSS vulnerability affecting www.vvd.nl, which at the time of submission ranked 485303 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Fedora 14 : xfig-3.2.5-25.b.fc14 (2010-18589)

Mon Dec 6 2010 Stanislav Ochotnicky - 3.2.5-25.b - Fix buffer overflow when opening malicious fig files - Thu Nov 25 2010 Hans de Goede 3.2.5-24.b - Fix importing of eps files 657290 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Unfixed XSS vulnerability at www.arnhem.nl

Security researcher DexTeR, has submitted on 16/12/2010 a cross-site-scripting XSS vulnerability affecting www.arnhem.nl, which at the time of submission ranked 761734 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at www2.nijmegen.nl

Security researcher DexTeR, has submitted on 16/12/2010 a cross-site-scripting XSS vulnerability affecting www2.nijmegen.nl, which at the time of submission ranked 459541 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is current...

CVE-2010-4248

Race condition in the exitsignal function in kernel/exit.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors related to multithreaded exec, the use of a thread group leader in kernel/posix-cpu-timers.c, and the selection of a new thread group leader...

SA-CONTRIB-2010-102 - Category tokens - Cross Site Scripting

The Category tokens module exposes additional tokens for the first and last terms related to a node for each vocabulary. The module does not sanitize the vocabulary names when displayed in token help, leading to a Cross-Site Scripting XSS vulnerability that may lead to a malicious user gaining fu...

Roxio Creator DE DLL Hijacking Exploit

/ Exploit Title: Roxio Creator DE DLL Hijacking Exploit HomeUtils9.dll Date: August 25, 2010 Author: storm [email protected] Version: 9.0.116 - Other versions are very possibly exploitable too Tested on: Windows Vista SP2 http://www.gonullyourself.org/ gcc -shared -o HomeUtils9.dll...

Roxio Creator DE DLL Hijacking Exploit (HomeUtils9.dll)

Exploit for windows platform in category local exploits ======================================================= Roxio Creator DE DLL Hijacking Exploit HomeUtils9.dll ======================================================= / Exploit Title: Roxio Creator DE DLL Hijacking Exploit HomeUtils9.dll Date...

Roxio Creator DE - HomeUtils9.dll DLL Hijacking

Roxio Creator DE - HomeUtils9.dll DLL Hijacking / Exploit Title: Roxio Creator DE DLL Hijacking Exploit HomeUtils9.dll Date: August 25, 2010 Author: storm [email protected] Version: 9.0.116 - Other versions are very possibly exploitable too Tested on: Windows Vista SP2...