Stack Buffer Overflow Vulnerability in Multiple SAP Products

SAP NetWeaver is an integrated service-oriented application platform that provides a development and runtime environment for SAP applications; ABAP is an application server that runs in NetWeaver and is based on the ABAP high-level programming language; and SAP .NET Connector is a connector betwe...

Microsoft .NET Custom XML Data Processing Denial of Service Vulnerability

Microsoft .NET Framework is a system distributed by Microsoft to help developers build WEB-based applications. A security vulnerability exists in the Microsoft .NET Framework that allows remote attackers to exploit a vulnerability by submitting special data to trigger a recursion that consumes a...

Microsoft ASP.NET Information Disclosure Vulnerability

Microsoft .NET Framework is a system distributed by Microsoft to help developers build WEB-based applications. An information disclosure vulnerability exists in Microsoft ASP.NET. On systems with the customErrors configuration disabled, ASP.NET errors when processing requests for certain...

Exploit for Code Injection in Microsoft

ExploitRemotingService c 2014 James Forshaw ==================...

PT-2014-6182 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 11.3.0.355 Description: The issue allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information without requiring authentication on TCP port 9010...

CVE-2013-3861

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service application crash or hang via crafted character sequences in JSON data, aka "JSON Parsing Vulnerability."...

CVE-2013-0073

The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...

PT-2013-2056 · Microsoft · Management Odata Iis Extension +3

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 3.5 through 4 Management OData IIS Extension on Windows Server 2012 Description: A denial of service issue exists in the OData protocol implementation, allowing remote attackers to cause a denial of service v...

PT-2013-2054 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2 through 4.5 Description: A buffer overflow issue exists in the System.DirectoryServices.Protocols namespace method, allowing remote attackers to execute arbitrary code via a crafted XAML browser...

PT-2013-2055 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 1.0 SP3 through 4.5 Description: The issue allows remote attackers to execute arbitrary code via a crafted XAML browser application XBAP or a crafted .NET Framework application. An elevation of privilege...

PT-2012-3599 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 Description: The issue allows remote attackers to execute arbitrary code via a crafted XAML browser application or a crafted .NET Framework application. This is due to the...

PT-2012-2240 · Microsoft · Silverlight +1

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2, 3.5.1, and 4 Silverlight versions 4 through 4.1.10110 Description: A remote code execution issue exists due to improper restriction of access to memory associated with unmanaged objects. This allows...

Null pointer dereference

PHP 5.3.8 does not always check the return value of the zendstrndup function, which might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that performs strndup operations on untrusted string data, as demonstrat...

PT-2011-4443 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 1.1 SP1 through 4.0 Description: The issue allows remote authenticated users to obtain access to arbitrary user accounts via a crafted username. An elevation of privilege vulnerability exists in the way that...

PT-2011-3518 · Microsoft · .Net Framework 4 +2

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework 4 Chart Control for Microsoft .NET Framework 3.5 SP1 Description: An information disclosure issue exists due to the improper handling of special characters within a specially crafted URI by Microsoft Chart controls...

PT-2011-2541 · Microsoft · .Net Framework +1

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP1 through 4.0 Silverlight versions prior to 4.0.60531.0 Description: The issue allows remote attackers to execute arbitrary code via crafted applications, including XAML browser applications, ASP.NET...

PT-2011-1458 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2 through 4.0 Description: A remote code execution issue exists in the way Microsoft .NET Framework handles certain function calls, potentially allowing attackers to execute arbitrary code via crafted...

Personal.Net Portal - Multiple Vulnerabilities

Personal.Net Portal - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Personal.Net Portal Multiple Vulnerabilities Affected Version : Personal.Net Portal...

PT-2009-4911 · Microsoft · Office Excel Viewer +29

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 1.1 SP1 through 2.0 SP2 Windows XP versions SP2 through SP3 Windows Server 2003 version SP2 Windows Vista versions Gold through SP1 Windows Server 2008 version Gold Microsoft Office XP version SP3 Microsoft...

DotNet Blog Database Disclosure

--------------------------------------------------------- Portal Name: DotNet Blog Vendor : http://www.peachydandy.com Download : http://dl.peachydandy.com/asp.net/blog/DotNet%20Blog%201.zip Author : PouyaServer , [email protected] Vulnerability : DD...