Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption Vulnerability

No description provided by source. Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 5.5.1 R10584 or 5.5.1.10584 Tested on: Microsoft Windows XP Professional SP3...

Microsoft Windows 2000 CreateFile API Named Pipe Privilege Escalation Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/8128/info It has been reported that Microsoft Windows does not properly handle named pipes through the CreateFile API. Because of this, an attacker may be able to gain access to the SYSTEM account. / tac0tac0.c - pay no...

ACE Stream Media 2.1 - (acestream://) Format String Exploit PoC

No description provided by source. ? ACE Stream Media 2.1 acestream:// Format String Exploit PoC Vendor: ACE Stream Product web page: http://www.acestream.org Affected version: Ace Player HD 2.1.9 VLC 2.0.5 Summary: Ace Stream is an innovative multimedia platform of a new generation, which includ...

Microsoft Windows ndproxy.sys - Local Privilege Escalation

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 Msf::Exploit::Local Rank = AverageRanking include Msf::Post::File include...

Ubisoft Rayman Legends 1.2.103716 - Remote Stack Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl Ubisoft Rayman Legends v1.2.103716 Remote Stack Buffer Overflow Vulnerability Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 1.2.103716, 1.1.100477 and 1.0.95278 Summary: Rayman Legends is...

IBM DB2 10.1 < Fix Pack 3a Multiple Vulnerabilities

According to its version, the installation of IBM DB2 10.1 running on the remote host is prior to Fix Pack 3a. It is, therefore, affected by one or more of the following vulnerabilities : - The included version of GSKit contains an error related to CBC-mode and timing that could allow an attacker...

Ubisoft Rayman Legends 1.2.103716 - Remote Stack Buffer Overflow (PoC)

!/usr/bin/perl Ubisoft Rayman Legends v1.2.103716 Remote Stack Buffer Overflow Vulnerability Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 1.2.103716, 1.1.100477 and 1.0.95278 Summary: Rayman Legends is a 2013 platform game developed by Ubisoft...

Ubisoft Rayman Legends 1.2.103716 Buffer Overflow

!/usr/bin/perl Ubisoft Rayman Legends v1.2.103716 Remote Stack Buffer Overflow Vulnerability Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 1.2.103716, 1.1.100477 and 1.0.95278 Summary: Rayman Legends is a 2013 platform game developed by Ubisoft...

CVE-2014-1818

GDI+ in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP1 and SP2, Live Meeting 2007 Console, Lync 2010 and 2013, Lync 2010 Attende...

CVE-2014-1811

The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service non-paged pool memory consumption and system hang via...

CVE-2014-1817

usp10.dll in Uniscribe aka the Unicode Script Processor in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP1 and SP2, Live Meeting...

CVE-2014-0296

The Remote Desktop Protocol RDP implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly encrypt sessions, which makes it easier for man-in-the-middle attackers to obtain sensitive information by sniffing the network or modify sessio...

Design/Logic Flaw

The Remote Desktop Protocol RDP implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly encrypt sessions, which makes it easier for man-in-the-middle attackers to obtain sensitive information by sniffing the network or modify sessio...

Denial of service

The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service non-paged pool memory consumption and system hang via...

CVE-2014-1811

The TCP implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to cause a denial of service non-paged pool memory consumption and system hang via...

CVE-2014-1817

CVE-2014-1817 concerns a vulnerability in usp10.dll (Uniscribe) that affects multiple Windows versions (Server 2003 SP2, Vista, Server 2008/2008 R2, Windows 7/8/8.1, Server 2012/R2) and related Office components. The issue arises from processing a crafted EMF+ record in a font file, enabling remo...

CVE-2014-1818

CVE-2014-1818 is a GDI+ image parsing vulnerability in Windows and Office components that allows remote code execution when a crafted EMF+ record is embedded in an image file. The affected products include multiple Windows versions (Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP...

CVE-2014-1811

CVE-2014-1811 affects the Windows TCP/IP stack in Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012, and Windows RT (and related editions). The vulnerability arises from handling malformed data in the TCP header Options field, leading to remote denia...

Microsoft Remote Desktop Tampering Vulnerability (2969259)

This host is missing an important security update according to Microsoft Bulletin MS14-030. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Window XML Core Services Information Disclosure Vulnerability (2966061)

This host is missing an important security update according to Microsoft Bulletin MS14-033. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...