15493 matches found
Microsoft Windows Journal File Processing CVE-2015-1675 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsof...
Microsoft Windows CVE-2015-1716 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya CallPilot 5.0.1...
Microsoft Windows Kernel Mode Driver CVE-2015-1676 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information such as kernel memory contents. This may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP...
Microsoft Windows Journal File Processing CVE-2015-1698 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsof...
MS15-053: Description of the security update for VBScript and JScript 5.7: May 12, 2015
None None...
Microsoft Windows not the USB drive overflow vulnerability-vulnerability warning-the black bar safety net
Affected system: Microsoft Windows XP SP2 Microsoft Windows XP SP1 Microsoft Windows Server 2 0 0 3 SP1 Microsoft Windows Server 2 0 0 3 Microsoft Windows ME Microsoft Windows 98se Microsoft Windows 9 8 Microsoft Windows 2000SP4 Microsoft Windows 2000SP3 Microsoft Windows 2000SP2 Microsoft Window...
Privilege escalation
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."...
CVE-2015-1701
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."...
Microsoft Windows System CallBack Privilege Escalation (CVE-2015-1701)
A privilege escalation vulnerability has been reported in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...
CVE-2015-1701
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka “Win32k Elevation of Privilege Vulnerability.” Recent assessments: gwillcox-r7 at...
Rekall - The Most Complete Memory Analysis Framework
The Rekall Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory RAM samples. The extraction techniques are performed completely independent of the system being investigated but...
Microsoft Windows CVE-2015-1701 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Microsoft Windo...
Oracle Hyperion Smart View for Office 11.1.2.3.000 - Crash (PoC)
Exploit Title: Buffer Overflow in Oracle� Hyperion Smart View for Office DOS Exploit Author: sajith Vendor Homepage: http://oracle.com vulnerable Version: Fusion Edition 11.1.2.3.000 Build 157 Vulnerable Link: http://www.oracle.com/technetwork/middleware/smart-view-for-office/downloads/index.html...
Oracle Hyperion Smart View For Office 11.1.2.3.000 DoS
Exploit Title: Buffer Overflow in Oracle� Hyperion Smart View for Office DOS Exploit Author: sajith Vendor Homepage: http://oracle.com vulnerable Version: Fusion Edition 11.1.2.3.000 Build 157 Vulnerable Link: http://www.oracle.com/technetwork/middleware/smart-view-for-office/downloads/index.html...
Microsoft Window (HTTP.sys) HTTP Request Parsing DoS (MS15-034)
Exploit for windows platform in category dos / poc Tested on Win Srv 2012R2. import socket,sys if lensys.argv=1: sys.exit'Give me an IP' Host = sys.argv1 def SendPayloadPayload, Host: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectHost, 80 s.sendPayload s.recv1024 s.close Make sure...
Oracle Hyperion Smart View for Office 11.1.2.3.000 - Crash (PoC)
Oracle Hyperion Smart View for Office 11.1.2.3.000 - Crash PoC Exploit Title: Buffer Overflow in Oracle� Hyperion Smart View for Office DOS Exploit Author: sajith Vendor Homepage: http://oracle.com vulnerable Version: Fusion Edition 11.1.2.3.000 Build 157 Vulnerable Link:...
Microsoft Windows - HTTP.sys HTTP Request Parsing Denial of Service (MS15-034)
Microsoft Windows - HTTP.sys HTTP Request Parsing Denial of Service MS15-034 Tested on Win Srv 2012R2. import socket,sys if lensys.argv=1: sys.exit'Give me an IP' Host = sys.argv1 def SendPayloadPayload, Host: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectHost, 80 s.sendPayload...
Microsoft Windows - 'HTTP.sys' HTTP Request Parsing Denial of Service (MS15-034)
Tested on Win Srv 2012R2. import socket,sys if lensys.argv=1: sys.exit'Give me an IP' Host = sys.argv1 def SendPayloadPayload, Host: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectHost, 80 s.sendPayload s.recv1024 s.close Make sure iisstart.htm exist. Init = "GET /iisstart.htm...
Microsoft Windows HTTP.sys Proof Of Concept
/ UNTESTED - MS15-034 Checker THE BUG: 8a8b2112 56 push esi 8a8b2113 6a00 push 0 8a8b2115 2bc7 sub eax,edi 8a8b2117 6a01 push 1 8a8b2119 1bca sbb ecx,edx 8a8b211b 51 push ecx 8a8b211c 50 push eax 8a8b211d e8bf69fbff call HTTP!RtlULongLongAdd 8a868ae1 ; here ORIGNAL POC:...
Secunia Research: Microsoft Windows GDI "MRSETDIBITSTODEVICE ::bPlay()" EMF Parsing Memory Corruption Vulnerability
====================================================================== Secunia Research 15/04/2015 Microsoft Windows GDI "MRSETDIBITSTODEVICE ::bPlay" EMF Parsing Memory Corruption Vulnerability ====================================================================== Table of Contents Affected...