Free Screen To Video 1.2 DLL Hijacking

/ Exploit Title: Free Screen To Video V1.2 DLL Hijacking Exploit iacenc.dll Date: 15/03/2011 Author: Metropolis Url: http://metropolis.fr.cr Software Link: http://www.koyotesoft.com/appli/SetupFreeScreenVideo.exe Version: V1.2 Tested on: Microsoft Windows XP Professional SP3 FR Instructions: 1...

Pointter PHP Content Management System 1.2 Multiple Vulnerabilities

Exploit for php platform in category web applications Vendor: PangramSoft GmbH Product web page: http://www.pointter.com Affected version: 1.2 Summary: Pointter PHP Content Management System is an advanced, fast and user friendly CMS script that can be used to build simple websites or professiona...

Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions

Summary Microsoft Source Code Analyzer for SQL Injection is a static code analysis tool for finding SQL Injection vulnerabilities in ASP code. Customers can run the tool on their ASP source code to help identify code paths that are vulnerable to SQL Injection attacks. Description The package...

pointter PHP content management system 1.2 - Multiple Vulnerabilities

Pointter PHP Content Management System 1.2 Multiple Vulnerabilities Vendor: PangramSoft GmbH Product web page: http://www.pointter.com Affected version: 1.2 Summary: Pointter PHP Content Management System is an advanced, fast and user friendly CMS script that can be used to build simple websites ...

Microsoft Windows Kernel整数截断本地权限提升漏洞

BUGTRAQ ID: 46136 CVE ID: CVE-2011-0045 Windows是微软发布的非常流行的操作系统。 Windows Kernel在实现上存在本地权限提升漏洞，攻击者可利用此漏洞以内核级别权限执行任意代码，从而完全控制受影响计算机。 此漏洞源于Kernel对跟踪事件的支持。由于畸形转换，Kernel为用户空间中的数据分配使用截断的长度。在填充此缓冲区时，Kernel将使用造成缓冲区溢出的另一个长度。这将造成内存破坏并导致执行任意代码。 Microsoft Windows XP Tablet PC Edition SP3 Microsoft Windows XP...

Elecard MPEG Player 5.7 Local Buffer Overflow PoC (SEH)

Summary Elecard MPEG Player is a high-quality full-featured multimedia player supporting the newest formats, designed to provide you with video and audio playback. Description The program suffers from a buffer overflow with SEH overwrite vulnerability when opening playlist file .m3u, as a result ...

WinMerge v2.12.4 Project File Handling Stack Overflow Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl Title: WinMerge v2.12.4 Project File Handling Stack Overflow Vulnerability Vendor: Thingamahoochie Software Product web page: http://www.winmerge.org Affected version: 2.12.4.0 Unicode Summary: WinMerge is an Open Source differenci...

WinMerge 2.12.4 - Project File Handling Stack Overflow

!/usr/bin/perl Title: WinMerge v2.12.4 Project File Handling Stack Overflow Vulnerability Vendor: Thingamahoochie Software Product web page: http://www.winmerge.org Affected version: 2.12.4.0 Unicode Summary: WinMerge is an Open Source differencing and merging tool for Windows. WinMerge can compa...

phpBugTracker 1.0.5 Cross Site Scripting

phpBugTracker 1.0.5 Multiple Reflected XSS Vulnerabilities Vendor: Benjamin Curtis Product web page: http://phpbt.sourceforge.net/ Affected version: 1.0.5 Summary: phpBugTracker is a web-based bug tracker with functionality similar to other issue tracking systems, such as Bugzilla. Design focuses...

GAzie 5.10 (Login parameter) Multiple Remote Vulnerabilities

Summary GAzie is a multi-company management program ERP that runs on Apache web server with support for PHP and Mysql database. Open Source web-based application for small and medium enterprises. Description GAzie is prone to a cross-site scripting and an SQL Injection vulnerability because it...

Design/Logic Flaw

Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends crafted service tickets, as demonstrated by the CRC32 algorithm, aka "Kerberos Unkeyed Checksum Vulnerability."...

Code injection

The OpenType Compact Font Format CFF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitra...

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-0086) Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Fail...

CVE-2011-0096

The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote...

MS Windows HID Functionality(Over USB) Code Execution Vulnerability

This host is installed with USB device driver software and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: gbmswindowshidoverusbcodeexecvuln.nasl 8724 2018-02-08 15:02:56Z cfischer $ MS Windows HID FunctionalityOver USB Code Execution Vulnerability Authors: Antu Sanadi...

Microsoft Windows Fax Cover Page Editor BOF Vulnerabilities

This host is installed with Fax Cover Page Editor and is prone to buffer overflow vulnerabilities. This NVT has been replaced by NVT secpodms11-024.nasl OID:1.3.6.1.4.1.25623.1.0.902408. OpenVAS Vulnerability Test $Id: gbmswindowsfscpebofvuln.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft...

Microsoft Windows Fax Cover Page Editor BOF Vulnerabilities

Fax Cover Page Editor is prone to multiple buffer overflow vulnerabilities. This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.902408. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...

KLA12360 ACE vulnerability in Microsoft Windows

Code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability in Human Interface Device HID to execute arbitrary code. Original advisories CVE-2011-0638 Related products Microsoft-Windows-Vista Microsoft-Windows-Server-2012 Microsoft-Windows-8...

CVE-2010-2743

The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, a...

CVE-2010-2743

The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows local users to gain privileges via a crafted application, as demonstrated in the wild in July 2010 by the Stuxnet worm, a...