Microsoft Windows Color Control Panel Remote Code Execution Vulnerability (2643719)

This host is missing an important security update according to Microsoft Bulletin MS12-012. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft PowerPoint Insecure Library Loading (MS11-094; CVE-2011-3396)

A remote code execution vulnerability has been reported in Microsoft PowerPoint. The vulnerability is due to an error in the way Microsoft PowerPoint restricts the path used for loading external libraries. A remote attacker could exploit this vulnerability by enticing a user to open a legitimate...

Internet Explorer Insecure Library Loading Code Execution (MS11-089; CVE-2011-2019)

A remote code execution vulnerability has been reported in Internet Explorer IE. The vulnerability is due to an error in the way IE restricts the path used for loading external libraries. A remote attacker could exploit this vulnerability by enticing a user to open a legitimate HTML file that is...

MS11-085: Vulnerability in Windows Mail and Windows Meeting Space Could Allow Remote Code Execution (2620704)

The remote Windows host is missing an security update. It is, therefore, affected by a flaw in Windows Mail and Windows Meeting Space related to the search path that is used when loading dynamic link library DLL files. This path may include directories that are not trusted or under user control. ...

MS11-076: Vulnerability in Windows Media Center could allow remote code execution: October 11, 2011

Resolves a vulnerability in Windows Media Center that could allow remote code execution if an attacker convinces a user to open a legitimate file that is located in the same network directory as a specially crafted dynamic link library DLL file.INTRODUCTIONMicrosoft has released security bulletin...

PT-2011-2985 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...

WordPress Link Library plugin <= 5.2.1 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Link Library plugin = 5.2.1 SQL Injection Vulnerability Date: 2011-09-16 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/link-library.zip Version: 5.2.1 tested Note:...

WordPress Link Library Plugin <= 5.2.1 - SQL Injection

Link Library plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Link Library 5.2.1 SQL Injection

Exploit Title: WordPress Link Library plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ./link-library-ajax.php: echo $mylinklibraryplugin-LinkLibrary...; ./link-library.php: class linklibraryplugin ... function LinkLibrary... return...

WordPress Plugin Link Library 5.2.1 - SQL Injection

WordPress Plugin Link Library 5.2.1 - SQL Injection Exploit Title: WordPress Link Library plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ./link-library-ajax.php: echo $mylinklibraryplugin-LinkLibrary...; ./link-library.php: class...

WordPress Plugin Link Library 5.2.1 - SQL Injection

Exploit Title: WordPress Link Library plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ./link-library-ajax.php: echo $mylinklibraryplugin-LinkLibrary...; ./link-library.php: class linklibraryplugin ... function LinkLibrary... return...

WordPress Link Library plugin <= 5.2.1 SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress Link Library plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ./link-library-ajax.php: echo $mylinklibraryplugin-LinkLibrary...; ./link-library.php: class...

ASPR #2011-08-18-1: Remote Binary Planting in Mozilla Firefox

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2011-08-18-1 ------------------------------------------------------------------------- ASPR 2011-08-18-1: Remote Binary Planting in Mozilla Firefox...

ASPR #2011-08-18-2: Remote Binary Planting in Mozilla Thunderbird

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2011-08-18-2 ------------------------------------------------------------------------- ASPR 2011-08-18-2: Remote Binary Planting in Mozilla Thunderbird...

CVE-2011-3012

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...

Foxit Reader < 5.0.2.0718 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 5.0.2.0718. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in how dynamic-link library DLL files are located and loaded, specifically files dwmapi.dll, dwrite.dll, and msdrm.dll. The application...

Citrix Access Gateway Plug-in for Windows ActiveX Control Multiple Vulnerabilities (CTX129902)

The Citrix Access Gateway ActiveX control for Citrix Access Gateway Enterprise Edition is installed on the remote Windows host. It is the ActiveX component of the Citrix Access Gateway Plug-in for Windows and provides an SSL-based VPN via a web browser. The installed version of this control is...

Microsoft Word .docx Insecure Library Loading (MS11-023; CVE-2011-0107)

Microsoft Word is a popular word processing software. A remote code execution vulnerability has been reported in the way that Microsoft Word handles the loading of DLL files. The vulnerability is caused when Microsoft Office Word incorrectly restricts the path used for loading external libraries...

flash-plugin: multiple code execution flaws (APSB11-02)

Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Основы написания Win-шеллкода

В этой статье речь пойдет о написании простого шеллкода под Windows платформу. Статья является начальным этапом цикла статей, которые я, опираясь на материалы и труды зарубежных специалистов в данной области, планирую написать. Эта статья не насыщена всеобъемлющей информацией, однако её цель -...