1022 matches found
Zenturi ProgramChecker ActiveX Control Arbitrary File Download.
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Zenturi...
AwingSoft Winds3D Player 3.5 SceneURL Download and Execute
This module exploits an untrusted program execution vulnerability within the Winds3D Player from AwingSoft. The Winds3D Player is a browser plugin for IE ActiveX, Opera DLL and Firefox XPI. By setting the 'SceneURL' parameter to the URL to an executable, an attacker can execute arbitrary code...
Gpg4Win Denial Of Service Vulnerability
Gpg4Win, as used in KDE Kleopatra is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Code injection
gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service application crash via a long certificate signature...
Find Windows Admin Tools over WMI if IIS installed (win)
If IIS installed, find Windows Admin Tools over WMI: arp.exe, at.exe, atsvc.exe, cacls.exe, cmd.exe, cscript.exe, debug.exe, edit.com, edlin.exe, ftp.exe, finger.exe, ipconfig.exe, net.exe, netsh.exe, netstat.exe, nslookup.exe, ping.exe, poledit.exe, posix.exe, qbasic.exe, rcp.exe, rdisk.exe,...
America Online ICQ ActiveX Control Arbitrary File Download and Execute
This module allows remote attackers to download and execute arbitrary files on a users system via the DownloadAgent function of the ICQPhone.SipxPhoneManager ActiveX control. This module requires Metasploit: https://metasploit.com/download Current source:...
Integer overflow
Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted 1 HostSize, and possibly 2 ProtoSize and 3 ServerSize, field that triggers a stack-based...
CVE-2009-3691
Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted 1 HostSize, and possibly 2 ProtoSize and 3 ServerSize, field that triggers a stack-based...
CVE-2009-3691
CVE-2009-3691 affects IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x. A crafted .nfx file with manipulated HostSize (and possibly ProtoSize/ServerSize) triggers a stack-based buffer overflow in HostList, enabling remote code execution or crashes. Connected advisories confir...
[Backports-security-announce] Security Update for clamav
Sebastian Harl uploaded new packages for clamav which fixed the following security problems: CVE-2008-6680, DSA-1771-1, Debian bug 523016 Attackers can cause a denial of service crash via a crafted EXE file that triggers a divide-by-zero error. CVE-2009-1270, DSA-1771-1, Debian bug 523016 Attacke...
Race Condition
Overview Affected versions of this package are vulnerable to Race Condition. Race condition in PulseAudio 0.9.9, 0.9.10, and 0.9.14 allows local users to gain privileges via vectors involving creation of a hard link, related to the application setting LDBINDNOW to 1, and then calling execv on the...
Command line under a new account method-vulnerability warning-the black bar safety net
Source: lcx Today research about the user control panel file nusrmgr. cpl, the discovery call is to the Shell. Users to add users, it also simultaneously calls the wscript. shell, Shell. Application, Shell. LocalMachine these three components. But added to the user while this one Shell. Users is...
IIS write permissions vulnerability principle&use of tools Manual Version-bug warning-the black bar safety net
Very old stuff, strictly speaking, not a vulnerability, just set up poorly causing the Bug. Eight hundred years of encounter less than a, the result a few days ago the misfortune to run into. With JSKY scan People's station, the results of the scanner actually directly to the people of the whole...
Mandriva Linux Security Advisory : clamav (MDVSA-2009:097)
Multiple vulnerabilities has been found and corrected in clamav : Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive CVE-2009-1241. libclamav/pe.c in ClamAV before 0.95 allows remote attackers to cause a denial of...
ClamAV Multiple Vulnerabilities (Windows)
This host has ClamAV installed, and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbclamavmultvulnapr09win.nasl 4865 2016-12-28 16:16:43Z teissa $ ClamAV Multiple Vulnerabilities Windows Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...
ClamAV Multiple Vulnerabilities (Linux)
This host has ClamAV installed and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbclamavmultvulnapr09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ ClamAV Multiple Vulnerabilities Linux Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Debian DSA-1771-1 : clamav - several vulnerabilities
Several vulnerabilities have been discovered in the ClamAV anti-virus toolkit : - CVE-2008-6680 Attackers can cause a denial of service crash via a crafted EXE file that triggers a divide-by-zero error. - CVE-2009-1270 Attackers can cause a denial of service infinite loop via a crafted tar file...
Star Downloader Free <= 1.45 (.dat) Universal SEH Overwrite Exploit
No description provided by source. / :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered and Exploited by dun Star Downloader Free = v1.45 .dat Universal SEH Overwrite Exploit Vendor:...
