3145 matches found
Talking about the Ring0 privilege of obtain-vulnerability warning-the black bar safety net
Recently been trying to write a program to kill 3 6 0, but encountered a lot of trouble, even if elevated, the 能干 掉 Winlogon.exe 也 干 不 掉 360tray.exe depressed for half a day. Don't know 3 6 0 what weird means. Then find the Find the previous comparison of the bovine X-virus Panda burning incense...
SAP Business One License Manager 2005 Buffer Overflow
This module exploits a stack buffer overflow in the SAP Business One 2005 License Manager 'NT Naming Service' A and B releases. By sending an excessively long string the stack is overwritten enabling arbitrary code execution. This module requires Metasploit: https://metasploit.com/download Curren...
Radix Antirootkit < 1.0.0.9 (SDTHLPR.sys) Privilege Escalation Exploit
No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Usec.at - http://www.usec.at/ | // // | | // // | Affected Software: | // // ...
Radix Antirootkit < 1.0.0.9 (SDTHLPR.sys) Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ====================================================================== Radix Antirootkit 1.0.0.9 SDTHLPR.sys Privilege Escalation Exploit ======================================================================...
Windows WINS Attacks In The Wild
The “critical” WINS vulnerability that Microsoft issued a patch for last week is now being exploited actively in the wild, according to the SANS Institute sans.org. The Internet Storm Center ISC, which is operated by SANS, is receiving preliminary reports that hackers are targeting Microsoft’s WI...
PT-2009-4388 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user. This is related to a credential...
Microsoft Windows XP (win32k.sys) Local Privilege Escalation Exploit
No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Microsoft Corporation - http://www.microsoft.com/ | // // | | // // | Affecte...
Microsoft Windows XP - win32k.sys Local Privilege Escalation
Microsoft Windows XP - win32k.sys Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | Microsoft Corporation - http://www.microsoft.com/ |...
Discuz!NT论坛多个文件变量过滤不严导致XSS攻击
Discuz!NT 版本中的usercpspacemanagealbum.aspx，usercpspacephotoadd.aspx等文件没有正确地过滤用户传递的albumtitle及多个变量只针对安装相册插件的版本。个人设置文件,usercpprofile.aspx文件没有正确地过滤用户传递realname,idcard。导致XSS攻击产生，可用于挂马，盗取网站敏感信息等一系列危害用户的危险行为！ http://www.bugging.com.cn/ Powered by Discuz!NT 2.6 以下 暂未通知，等待官方补丁 http://www.bugging.com.cn/...
Microsoft Windows SMB Registry : Vista / Server 2008 Service Pack Detection
It is possible to determine the Service Pack version of the Windows Vista / Server 2008 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38912; scriptversion"1.10";...
ArcaVir 2009 < 9.4.320X.9 - 'ps_drv.sys' Local Privilege Escalation
//////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | ArcaBit Sp. z o.o. - http://www.arcabit.com/ | // // | | // // | Affected Software: | // // | ArcaVir 2009...
WoDig community program wodig. asp page the filter is not strict lead to SQL injection vulnerabilities-vulnerability warning-the black bar safety net
System number: WAVDB-0 1 4 2 1 Affected version: WoDig 4.1.2 Program description: WODIG is a refined design of Chinese DIGG community open source program is a Windows NT Service environment under the DIGG community program the best solution. Vulnerability analysis: In the file wodig. asp: tagsnam...
WoDig社区程序Default.asp页面过滤不严导致SQL注入漏洞
WODIG是一套经过完善设计的中文DIGG社区开源程序，是Windows NT服务环境下DIGG社区程序的最佳解决方案。 在文件Default.asp中： tagsname = Request"tagsname" //第33行 …… %Call Default.GetMainPP"Default.asp"% //第157行 GetMainPP过程在文件wolib/ clsclass.asp中： Public Sub GetMainPPpageurl //第827行 …… if tagsname "" then //第839行 Sql = Sql & " and SrcID inSelec...
WoDig社区程序wodig.asp页面过滤不严导致SQL注入漏洞
WODIG是一套经过完善设计的中文DIGG社区开源程序，是Windows NT服务环境下DIGG社区程序的最佳解决方案。 在文件wodig.asp中： tagsname = Request"tagsname" //第13行 …… %Call Default.GetMainContent"wodig.asp"% //第105行 GetMainContent过程在文件/WoLib/ClsClass.asp中： Public Sub GetMainPPpageurl //第827行 …… if tagsname "" then //第839行 Sql = Sql & " and SrcID...
Microsoft Internet Explorer Remote Code Execution Vulnerability (963027)
This host is missing a critical security update according to Microsoft Bulletin MS09-014. OpenVAS Vulnerability Test $Id: secpodms09-014.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Remote Code Execution Vulnerability 963027 Authors: Sharath S Updated By: Madhuri D on...
[ MDVSA-2009:078 ] evolution-data-server
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:078 http://www.mandriva.com/security/ Package : evolution-data-server Date : March 23, 2009 Affected: 2008.0, 2008.1, 2009.0 Problem Description: A wrong handling of signed Secure/Multipurpose Internet Mail...
CloneCD/DVD (ElbyCDIO.sys < 6.0.3.2) Local Privilege Escalation Exploit
No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | SlySoft Inc. - http://www.slysoft.com/ | // // | | // // | Affected Software:...
CloneCD/DVD (ElbyCDIO.sys < 6.0.3.2) Local Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ======================================================================= CloneCD/DVD ElbyCDIO.sys 6.0.3.2 Local Privilege Escalation Exploit =======================================================================...
CloneCDDVD ElbyCDIO.sys 6.0.3.2 - Local Privilege Escalation
CloneCDDVD ElbyCDIO.sys 6.0.3.2 - Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | SlySoft Inc. - http://www.slysoft.com/ | // // | | ...
[SECURITY] Fedora 10 Update: ejabberd-2.0.4-1.fc10
ejabberd is a Free and Open Source distributed fault-tolerant Jabber/XMPP server. It is mostly written in Erlang, and runs on many platforms tested on Linux, FreeBSD, NetBSD, Solaris, Mac OS X and Windows NT/2000/XP...