8762 matches found
Microsoft Windows kernel privilege escalation
Invalid exception handling in GP trap handler allows ring0 privilege escalation...
Microsoft Windows GP Trap Handler Privilege Escalation Vulnerability
Microsoft Windows operating system is prone to a privilege escalation vulnerability. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.900740. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...
HTMLDOC 1.9.x-r1629 (Windows x86) - .html Local Buffer Overflow
HTMLDOC 1.9.x-r1629 Windows x86 - .html Local Buffer Overflow /HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit download: http://www.htmldoc.org/software.php?VERSION=1.9.x-r1629&FILE=htmldoc/snapshots/htmldoc-1.9.x-r1629.tar.bz2 header 19 bytes junk 268 bytes EIP register 4 bytes NOP...
HTMLDOC 1.9.x-r1629 (Windows x86) - '.html' Local Buffer Overflow
/HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit download: http://www.htmldoc.org/software.php?VERSION=1.9.x-r1629&FILE=htmldoc/snapshots/htmldoc-1.9.x-r1629.tar.bz2 header 19 bytes junk 268 bytes EIP register 4 bytes NOP SLEED 15 bytes calc.exe shellcode 338 bytes PLEASE READ: 1.Run...
Solaris 7 8 9 sadmind RPC Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
CentOS 5 : kernel (CESA-2008:0612)
Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
Special ActiveX repurposing attacks tips and techniques-vulnerability warning-the black bar safety net
Copyright c 2 0 0 9 Czy Invicta Hack01@Live! cn All rights reserved. == 0x00 Foreword In this article, I am not against ActiveX controls the basic attack scenarios will be discussed. I'm here to be discussed is the use of a lot of interesting tricks and techniques to the development and utilizati...
Adobe Flash Player/Air Multiple Vulnerabilities - dec09 (Linux)
This host is installed with Adobe Flash Player/Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeprdtsmultvulndec09lin.nasl 6476 2017-06-29 07:32:00Z cfischer $ Adobe Flash Player/Air Multiple Vulnerabilities - dec09 Linux Authors: Antu Sanadi Copyright: Copyrig...
Adobe Flash Player/Air Multiple Vulnerabilities - dec09 (Windows)
This host is installed with Adobe Flash Player/Air and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeprdtsmultvulndec09win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Flash Player/Air Multiple Vulnerabilities - dec09 Windows Authors: Antu Sanadi Copyright:...
Firefox 3.5 < 3.5.6 Multiple Vulnerabilities
The installed version of Firefox is 3.5.x earlier than 3.5.6. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2009-65 - Multiple vulnerabilities in 'liboggplay' can lead to arbitrary code execution. MFSA...
GeckoActiveXObject exception messages can be used to enumerate installed COM objects — Mozilla
Security researcher Gregory Fleischer reported that the exception messages generated by Mozilla's GeckoActiveXObject differ based on whether or not the requested COM object's ProgID is present in the system registry. A malicious site could use this vulnerability to enumerate a list of COM objects...
Oracle Database Server String Conversion Function Buffer Overflow (CVE-2004-1364)
Oracle's implementation of SQL provides several conversion and transformation functions to help database users work with the various data types. Conversion functions can be executed by all authenticated database users. There exists an input validation vulnerability with Oracle database server...
CVE-2009-3799
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptioncount value that triggers memory corruption, related to "generation of...
flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptioncount value that triggers memory corruption, related to "generation of...
flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exceptioncount value that triggers memory corruption, related to "generation of...
Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit
?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...
CA BrightStor Universal Agent Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightSto...
Cross site scripting
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting XSS attacks via unspecified vectors...
CVE-2009-4071
Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting XSS attacks via unspecified vectors...
CVE-2009-4071
CVE-2009-4071 affects the Opera web browser (notably Opera on Linux/Unix paths in the connected records) where, when exception stacktraces are enabled, scripting error messages from a site can be read by a different site, enabling information disclosure and cross-site scripting via unspecified ve...