Microsoft Windows AutoRuns Registry Hijack Possible Locations

Binary data windowsautorunsimageHiJacks.nbin...

Microsoft Windows AutoRuns Print Monitor

Binary data windowsautorunsprintmonitors.nbin...

Microsoft Windows AutoRuns Setup

Binary data windowsautorunssetup.nbin...

Microsoft Windows AutoRuns Known DLLs

Binary data windowsautorunsknownDLLs.nbin...

Microsoft Windows AutoRuns Appinit DLLs

Binary data windowsautorunsappInitdll.nbin...

Microsoft Windows AutoRuns Winsock Provider

Binary data windowsautorunswinsockproviders.nbin...

Microsoft Windows AutoRuns Logon

Binary data windowsautorunslogon.nbin...

Microsoft Windows AutoRuns Codecs

Binary data windowsautorunscodecs.nbin...

Microsoft Windows AutoRuns Winlogon

Binary data windowsautorunswinlogon.nbin...

Microsoft Windows AutoRuns LSA Providers

Binary data windowsautorunsLSAProviders.nbin...

Microsoft Windows AutoRuns Internet Explorer

Binary data windowsautorunsinternetexplorer.nbin...

Microsoft Windows AutoRuns Scheduled Tasks

Binary data windowsautorunsschtasks.nbin...

Microsoft Windows AutoRuns Unique Entries

Binary data windowsautorunsuniqueentries.nbin...

Microsoft Windows AutoRuns Network Providers

Binary data windowsautorunsnetworkproviders.nbin...

WordPress WooCommerce 2.0.17 Cross Site Scripting

Wordpress WooCommerce Plugin 2.0.17 Cross-Site Scripting Vulnerability Vendor: WooThemes Product web page: http://www.woothemes.com Affected version: 2.0.17 and 2.0.14 Summary: WooCommerce is an open source e-commerce plugin for WordPress. Desc: The plugin suffers from a XSS issue due to a...

Microsoft Windows Authenticated Powershell Command Execution

This module uses a valid administrator username and password to execute a powershell payload using a similar technique to the "psexec" utility provided by SysInternals. The payload is encoded in base64 and executed from the commandline using the -encodedcommand flag. Using this method, the payloa...

Microsoft Windows OpenType Font Parsing Persistent Denial-of-Service Vulnerability

This vulnerability allows remote attackers to causes a persistent Denial-of-Service on machines running vulnerable versions of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must open a vulnerable font. The specific flaw exists within the handling...

CVE-2013-3881

win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a crafted application, aka "Win32k NULL Page Vulnerability."...

CVE-2013-3128

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitra...

CVE-2013-3200

The USB drivers in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow physically proximate attackers to execute arbitrary code by connectin...