MPEG-4 Codec RCE Vulnerability (975558)

This host is missing a critical security update according to Microsoft Bulletin MS10-062. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Textpattern 4.2.0 (txplib_db) Null Termination Cross-Site Scripting Vulnerability

Summary Textpattern is an open source content management system unlike any other; it allows you to easily create, edit and publish content and make it beautiful in a professional, standards-compliant manner. Description Textpattern CMS version 4.2.0 suffers from a XSS vulnerability. Input passed...

CVE-2010-2739

Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP1, Windows 7, and Server 2008 SP2 allows local users to cause a denial of service crash and possibly execute arbitrary code by performing a clipboard operati...

Joomla Component com_taxes SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Joomla Component comtaxes SQL Injection Vulnerability ====================================================== ========================================================================== x...

LEADTOOLS 16.5 Active-X Common Dialogs Vulnerabilities

LEADTOOLS ActiveX Common Dialogs 16.5 Multiple Remote Vulnerabilities Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that has a TWAIN 32 and 64 bit device...

Advanced Guestbook 2.2 Blind SQL Injection Vulnerabilities

Exploit for php platform in category web applications ========================================================== Advanced Guestbook 2.2 Blind SQL Injection Vulnerabilities ========================================================== Exploit Title : Advanced Guestbook 2.2 Blind SQL Injection...

Get Short & Protected Link SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Get Short & Protected Link SQL Injection Vulnerability ====================================================== Exploit Title : Get Short & Protected Link SQL Injection Vulnerability Downloa...

LeadTools ActiveX Raster Twain 16.5 - LtocxTwainu.dll Buffer Overflow (PoC)

LeadTools ActiveX Raster Twain 16.5 - LtocxTwainu.dll Buffer Overflow PoC LEADTOOLS ActiveX Raster Twain v16.5 LtocxTwainu.dll Remote Buffer Overflow PoC Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected Version: 16.5.0.2 Summary: With LEADTOOLS you can control a...

LEADTOOLS ActiveX Raster Twain 16.5 Buffer Overflow

LEADTOOLS ActiveX Raster Twain v16.5 LtocxTwainu.dll Remote Buffer Overflow PoC Vendor: LEAD Technologies, Inc. Product Web Page: http://www.leadtools.com Affected Version: 16.5.0.2 Summary: With LEADTOOLS you can control any scanner, digital camera or capture card that has a TWAIN 32 and 64 bit...

CVE-2010-3138

Untrusted search path vulnerability in the Indeo Codec in iac2532.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that...

Design/Logic Flaw

Untrusted search path vulnerability in the Internet Connection Signup Wizard in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a Trojan horse smmscrpt.dll file in the current working directory, as demonstrated by a directory that contains an ISP or...

CVE-2010-3147

CVE-2010-3147 describes an untrusted search path vulnerability in Windows Address Book (wab.exe) where a Trojan horse wab32res.dll loaded from the current working directory can execute code. Affected: WAB/Windows Contacts components on Windows XP SP2/XP SP3, Server 2003 SP2, Vista SP1/SP2, Server...

CVE-2010-3144

CVE-2010-3144 concerns an insecure library loading vulnerability in the Internet Connection Signup Wizard (ICSW) affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The root cause is untrusted search path handling that allows loading a Trojan horse DLL (smmscrpt.dll) from the current direct...

Microsoft Office PowerPoint 2007 12.0.4518 DLL Hijacking Exploit

/ Microsoft Office PowerPoint 2007 v12.0.4518 pp4x322.dll DLL Hijacking Exploit Vendor: Microsoft Corp. Product Web Page: http://www.microsoft.com Affected Version: 12.0.4518.1014 MSO 12.0.4518.1014 Summary: Microsoft PowerPoint is a presentation program by Microsoft. It is part of the Microsoft...

Corel PHOTO-PAINT X3 13.0.0.576 DLL Hijacking Exploit

/ Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3 suffers from a dll hijacking...

CorelDRAW X3 13.0.0.576 DLL Hijacking Exploit

/ CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: CorelDRAW X3 suffers from a dll hijacking vulnerability that...

Corel PHOTO-PAINT X3 13.0.0.576 - crlrib.dll DLL Hijacking

Corel PHOTO-PAINT X3 13.0.0.576 - crlrib.dll DLL Hijacking / Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc...

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - scvncsrvx.dll Denial of Service

SmartCode ServerX VNC Server ActiveX 1.1.5.0 - scvncsrvx.dll Denial of Service Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 scvncsrvx.dll DoS Exploit Vendor: SmartCode Solutions Product Web Page: htt://www.s-code.com Version Tested: 1.1.5.0 Summary: SmartCode ServerX VNC Server control is ...

Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability (981997)

This host is missing a critical security update according to Microsoft Bulletin MS10-050. OpenVAS Vulnerability Test $Id: secpodms10-050.nasl 5361 2017-02-20 11:57:13Z cfi $ Microsoft Windows Movie Maker Could Allow Remote Code Execution Vulnerability 981997 Authors: Veerendra GG Updated By:...

Team Johnlong RaidenTunes 2.1.1 Cross Site Scripting

Title: Team Johnlong RaidenTunes 2.1.1 Remote Cross-Site Scripting Vulnerability Vendor: RaidenFTPDteam / Team Johnlong Software Product Web Page: http://www.raidentunes.com Summary: RaidenTunes is a Web server based + application software that allows You to setup an online music server quickly. ...