Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796-PoC winners! Daniel García Gutiérrez @dan...

CVE-2019-0569

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012,...

Security update 2018-08-14

...

MS07-042: Description of the security update for Microsoft XML Core Services 6.0: August 14, 2007

MS07-042: Description of the security update for Microsoft XML Core Services 6.0: August 14, 2007 INTRODUCTION Microsoft has released security bulletin MS07-042. The security bulletin contains all the relevant information about the security update. This information includes file manifest...

EUVD-2018-1692

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way...

Security update 2017-09-12

...

Microsoft Systems Management Server 1.2/2.0 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10726/info Reportedly Microsoft Systems Management Server is vulnerable to a remote denial of service vulnerability. This issue is due to a failure of the affected server to handle exceptional conditions. Successful...

Microsoft System Center Configuration Manager XSS Vulnerability (2741528)

This host is missing an important security update according to Microsoft Bulletin MS12-062. OpenVAS Vulnerability Test $Id: secpodms12-062.nasl 6520 2017-07-04 14:28:49Z cfischer $ Microsoft System Center Configuration Manager XSS Vulnerability 2741528 Authors: Rachana Shetty Copyright: Copyright...

CVE-2012-2536

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...

CVE-2012-2536

Cross-site scripting XSS vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Reflected XSS Vulnerability."...

CVE-2012-2536

CVE-2012-2536 corresponds to a reflected XSS in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2. Reports (MS12-062/MSBK entries and related advisories) detail that specially crafted requests can cause arbitrary script/HTML to run in a user’s browser o...

Webster HTTP Server GET Buffer Overflow

$Id: websterhttp.rb 10887 2010-11-03 12:19:19Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Webster HTTP Server GET Buffer Overflow

This exploits a stack buffer overflow in the Webster HTTP server. The server and source code was released within an article from the Microsoft Systems Journal in February 1996 titled "Write a Simple HTTP-based Server Using MFC and Windows Sockets". This module requires Metasploit:...

Webster HTTP Server - GET Buffer Overflow (Metasploit)

$Id: websterhttp.rb 10887 2010-11-03 12:19:19Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

CVE-2004-0728

The Remote Control Client service in Microsoft's Systems Management Server SMS 2.50.2726.0 allows remote attackers to cause a denial of service crash via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address...

Microsoft Systems Management Server client memory corruption

Malcrafted data to TCP/2702 port causes memory corruption...

MS SMS DOS Proof-of-concept code and Snort sig

Advisory Name : Microsoft Systems Management Server Remote Denial Of Service Vulnerability Release Date : 22 July, 2004 Application : Microsoft Systems Management Server SMS Author : MacDefender / SRR Project Group of Ready Response [email protected] Overview In response to a remote denial of...

CVE-2004-0728

The Remote Control Client service in Microsoft's Systems Management Server SMS 2.50.2726.0 allows remote attackers to cause a denial of service crash via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address...

[HV-MED] DoS in Microsoft SMS Client

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Denial of Service DoS in Microsoft SMS Client Classification: =============== Level: low-MED-high-crit ID: HEXVIEW200407141 Overview: ========= Microsoft Systems Management Server provides configuration management solution for Windows platform. It is...