CVE-2015-5624

Buffer overflow in the ExecCall method in c2lv6.ocx in the FreeBit ELPhoneBtnV6 ActiveX control allows remote attackers to execute arbitrary code via a crafted HTML document, related to the discontinued "Click to Live" service...

CVE-2015-5624

CVE-2015-5624 describes a buffer overflow in the ExecCall() method of the FreeBit ELPhoneBtnV6 ActiveX control (c2lv6.ocx). The vulnerability allows a remote attacker to execute arbitrary code by prompting a user to view a specially crafted HTML document. The ActiveX control is part of the discon...

JVN#62078684: ELPhoneBtnV6 ActiveX control vulnerable to buffer overflow

ELPhoneBtnV6 ActiveX control was used for "Click to Live" service provided by FreeBit Co., Ltd. Although "Click to Live" service has been discontinued, PCs that used the "Click to Live" service may still have the ActiveX control installed. ELPhoneBtnV6 ActiveX control, which is provided by the fi...

Penetration Testers Distro: Pentoo

Pentoo is a Live CD and Live USB designed for penetration testing and security assessment. Based on Gentoo Linux , Pentoo is provided both as 32 and 64 bit installable livecd. Pentoo is also available as an overlay for an existing Gentoo installation. It features packet injection patched wifi...

airtellive.com XSS vulnerability

Vulnerable URL: http://www.airtellive.com/local/index.html?city=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

VideoLAN VLC Media Player 2.2.1 - m3u8m3u Crash (PoC)

VideoLAN VLC Media Player 2.2.1 - m3u8m3u Crash PoC !/usr/bin/python VLC media player 2.2.1 m3u8/m3u Crash Proof Of Concept Author: Naser Farhadi Date: 25 August 2015 Version: 2.2.1 Tested on: Windows 7 SP1 32 bit """ ModLoad: 71ae0000 71b64000...

VLC Media Player 2.2.1 - m3u8/m3u Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python VLC media player 2.2.1 m3u8/m3u Crash Proof Of Concept Author: Naser Farhadi Date: 25 August 2015 Version: 2.2.1 Tested on: Windows 7 SP1 32 bit """ ModLoad: 71ae0000 71b64000...

CVE-2015-2431

Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library OGL font, aka "Microsoft Office Graphics Component Remote Code Execution...

Remote code execution

Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library OGL font, aka "Microsoft Office Graphics Component Remote Code Execution...

Design/Logic Flaw

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight...

Design/Logic Flaw

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1,...

CVE-2015-2431

CVE-2015-2431 is a remote code execution vulnerability in Microsoft Office Graphics Library (OGL) fonts. Affected products include Office 2007 SP3, Office 2010 SP2, Live Meeting 2007 Console, Lync 2010/Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1. The underlying issue is with OGL font handlin...

SUSE-SU-2015:1490-1 Live patch for the Linux Kernel

This update contains a kernel live patch for the 3.12.43-52.6 SUSE Linux Enterprise Server 12 Kernel, fixing following security issues. - CVE-2015-5364/CVE-2015-5366: Two denial of service attacks via a flood of UDP packets with invalid checksums were fixed that could be used by remote attackers ...

SUSE-SU-2015:1491-1 Live patch for the Linux Kernel

This update contains a kernel live patch for the 3.12.39-47 SUSE Linux Enterprise Server 12 Kernel, fixing following security issues. - CVE-2015-3339: A race condition in the preparebinprm function in fs/exec.c in the Linux kernel allowed local users to gain privileges by executing a setuid progr...

SUSE-SU-2015:1487-1 Live patch for the Linux Kernel

This update contains a kernel live patch for the 3.12.38-44 SUSE Linux Enterprise Server 12 Kernel, fixing following security issues. - CVE-2015-3339: A race condition in the preparebinprm function in fs/exec.c in the Linux kernel allowed local users to gain privileges by executing a setuid progr...

SUSE-SU-2015:1489-1 Live patch for the Linux Kernel

This update contains a kernel live patch for the 3.12.32-33 SUSE Linux Enterprise Server 12 Kernel, fixing following security issues. - CVE-2015-3339: A race condition in the preparebinprm function in fs/exec.c in the Linux kernel allowed local users to gain privileges by executing a setuid progr...

Microsoft Live Meeting Remote Code Execution Vulnerabilities (3078662)

This host is missing a critical security update according to Microsoft Bulletin MS15-080. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Windows TrueType Fonts CVE-2015-2435 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Live...

Microsoft Windows TrueType Fonts CVE-2015-2464 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft .NET...

Turnkey Web Tools PHP Live Helper 1.8 Remote File Inclusion (CVE-2006-1477)

A file inclusion vulnerability has been reported in Turnkey Web Tools PHP Live Helper. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...