15592 matches found
Microsoft Windows Tracing Registry Key ACL Privilege Escalation Vulnerability
No description provided by source. Source: http://www.securityfocus.com/bid/42269/info Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will result in the comple...
Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/8128/info It has been reported that Microsoft Windows does not properly handle named pipes through the CreateFile API. Because of this, an attacker may be able to gain access to the SYSTEM account. / tac0tac0.c - pay no...
Cisco User-Changeable Password (UCP) 3.3.4.12.5 - 'CSuserCGI.exe' Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28222/info Cisco User-Changeable Password UCP is prone to multiple remote vulnerabilities, including cross-site scripting and buffer-overflow vulnerabilities. Exploiting the cross-site scripting issues may help the attack...
Microsoft Windows 9x / Me Share Level Password Bypass Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed. Share level access provides peer to peer networking capabilities in the Windows 9x/ME environment. It...
Apache Tomcat 4.0.3 DoS Device Name Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5194/info A vulnerability has been reported for Apache Tomcat 4.0.3 on a Microsoft Windows platform. Reportedly, it is possible for an attacker to launch a cross site scripting attack. When making a request for a DOS devi...
PlatinumFTPServer 1.0.6 Dot-Dot-Slash Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6554/info PlatinumFTPserver is an FTP server for Microsoft Windows systems. It is commercially available, and distributed by PlatinumFTP. A directory traversal vulnerability has been reported in PlatinumFTPserver. The...
Oracle MySQL for Microsoft Windows MOF Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Snitz Forums 2000 3.x Members.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4558/info Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems. Snitz is back-ended by a database and supports Microsoft Access 97/2000, SQL Server 6.5/7.0/2000 and MySQL. It i...
Mozilla Firefox <= 3.0.3 Internet Shortcut Same Origin Policy Violation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31611/info Mozilla Firefox is prone to a vulnerability that allows attackers to violate the same-origin policy. This issue occurs because the application fails to properly enforce the same-origin policy when handling...
Macromedia Sitespring 1.2 Default Error Page Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5249/info Macromedia Sitespring is a J2EE-compliant product for managing website production. The Macromedia Sitespring server runs on Microsoft Windows operating systems. A cross-site scripting issue has been reported in...
Opera 7 Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/8066/info Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the...
Microsoft Windows Image Acquisition Logger ActiveX Control Arbitrary File Overwrite Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails...
Microsoft Windows XP/2000 Messenger Service Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8826/info Microsoft Windows Messenger Service is prone to a remotely exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of messages before they are passed to an internal buffer...
Ultrafunk Popcorn 1.20 Multiple Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/5212/info Ultrafunk Popcorn email client is designed for Microsoft Windows systems and is no longer being maintained. It has been reported that Popcorn email client will stop responding when attempting to open malformed...
Microsoft Windows Image Acquisition Logger ActiveX Control Arbitrary File Overwrite Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/31069/info Microsoft Windows Image Acquisition Logger ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. The issue occurs because the control fails...
Vivotek Cameras Sensitive Information Disclosure
No description provided by source. Exploit Title: Vivotek Full Data Source CONFIG Date: 09/07/12 Author: Alejandro Leon Morales GothicX Author Mail: Gothicxatfreaknetworkdotin Author Web: www.undermx.blogspot.mx Sofware web: www.vivotek.com Vulnerable version: all Tested on: Microsoft windows 7 /...
WorldSpan Res Manager 4.1 Malformed TCP Packet Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5169/info It has been reported that WorldSpan Res Manager 4.1 for Microsoft Windows is vulnerable to a denial of service condition. Res Manager systems are connected to Worldspan via private lines or through the Internet...
silentthought simple web server 1.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7888/info It has been reported that Simple Web Server fails to properly sanitize web requests. By sending a malicious web request to the vulnerable server, using directory traversal sequences, it is possible for a remote...
Opera 7.0 History Object Information Disclosure Weakness
No description provided by source. source: http://www.securityfocus.com/bid/6757/info An information disclosure weakness has been reported for Opera 7 browsers on the Microsoft Windows platform. The weakness is due to the way the history object exposes some properties. Specifically, the propertie...
Microsoft Windows 2000/2003/XP winhlp32 Phrase Heap Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12092/info Microsoft Windows is prone to a heap-based buffer overflow vulnerability. This issue exists in 'winhlp32.exe' and is exposed when a malformed phrase compressed Windows Help file .hlp is processed by the program...