664 matches found
CVE-2016-0034
Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service object-header corruption via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."...
PT-2016-1037 · Microsoft · Silverlight
Name of the Vulnerable Software and Affected Versions: Microsoft Silverlight versions prior to 5.1.41212.0 Description: The issue is related to the mishandling of negative offsets during decoding, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service vi...
MS16-004: Security Update for Microsoft Office to Address Remote Code Execution (3124585)
The remote Windows host has a version of Microsoft Office, Word, Word Viewer, Excel, Excel Viewer, PowerPoint, Visio, SharePoint, Visual Basic, or Microsoft Office Compatibility Pack installed that is affected by multiple vulnerabilities : - Multiple cross-site scripting vulnerabilities exist in...
VulnCheck KEV: CVE-2016-0034
Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service DoS...
Microsoft Internet Explorer/Edge ASLR Security Bypass Vulnerability
Microsoft Internet Explorer is a commonly used browser. A security bypass vulnerability exists in Microsoft Internet Explorer. An attacker can bypass the ASLR security feature by more easily predicting memory offsets that specify call stack specific instructions...
Microsoft Internet Explorer ASLR Security Bypass Vulnerability (CNVD-2015-05229)
Microsoft Internet Explorer is a commonly used browser. A security bypass vulnerability exists in Microsoft Internet Explorer. An attacker can exploit the vulnerability to bypass the ASLR security feature by making it easier to predict memory offsets that specify call stack specific instructions...
MS15-070: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)
The remote Windows host has a version of Microsoft Office, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, SharePoint Server, or Microsoft Office Compatibility Pack installed that is affected by multiple vulnerabilities : - An ASLR bypass vulnerability exists in Microsoft Excel due to memo...
Microsoft Office Security Feature Bypass Vulnerability (3033857)
This host is missing an important security update according to Microsoft Bulletin MS15-013. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
[SECURITY] [DLA 145-1] php5 security update
Package : php5 Version : 5.3.3-7+squeeze24 CVE ID : CVE-2014-0237 CVE-2014-0238 CVE-2014-2270 CVE-2014-8117 Brief introduction CVE-2014-0237 The cdfunpacksummaryinfo function in cdf.c in the Fileinfo component in PHP before 5.4.29 and 5.5.x before 5.5.13 allows remote attackers to cause a denial ...
OS X 10.9.x - sysmond XPC Privilege Escalation Vulnerability
Exploit for macOS platform in category local exploits / Source: https://code.google.com/p/google-security-research/issues/detail?id=121 / / tested on OS X 10.9.5 - uses some hard-coded offsets which will have to be fixed-up for other versions! this poc uses liblorgnette to resolve some private...
Novell-Client-4.91-SP4-Escalation
Author: [email protected] Version Tested: Novell Client 4.91 SP4 Targets: Exploit works on all service packs of Win2K3 and WinXP except Windows XP SP1 from ctypes import import sys,struct,os from optparse import OptionParser kernel32 = windll.kernel32 ntdll = windll.ntdll Psapi =...
xorg-x11-server: out of bounds access due to not validating length or offset values in DBE extension
Multiple out-of-bounds access flaws were found in the way the X.Org server calculated memory requirements for certain requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server, or leak memory contents to the client...
DLA-90-1 imagemagick - security update
Bulletin has no description...
file: out-of-bounds access in search rules with offsets from input file
A denial of service flaw was found in the way the File Information fileinfo extension handled search rules. A remote attacker could use this flaw to cause a PHP application using fileinfo to crash or consume an excessive amount of CPU...
file: out-of-bounds access in search rules with offsets from input file
A denial of service flaw was found in the way the File Information fileinfo extension handled search rules. A remote attacker could use this flaw to cause a PHP application using fileinfo to crash or consume an excessive amount of CPU...
file: out-of-bounds access in search rules with offsets from input file
A denial of service flaw was found in the way the File Information fileinfo extension handled search rules. A remote attacker could use this flaw to cause a PHP application using fileinfo to crash or consume an excessive amount of CPU...
MS Windows WebDAV - (ntdll.dll) Remote Exploit
No description provided by source. // / Crpt ntdll.dll exploit trough WebDAV by kralor Crpt / / --------------------------------------------------------------- / / this is the exploit for ntdll.dll through WebDAV. / / run a netcat ex: nc -L -vv -p 666 / / wb server.com yourip 666 0 / / the...
PHP <= 5.2.1 session_regenerate_id() Double Free Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
Cisco IOS 12.3(18) FTP Server - Remote Exploit (attached to gdb)
No description provided by source. / Cisco IOS FTP server remote exploit by Andy Davis 2008 Cisco Advisory ID: cisco-sa-20070509-iosftp - May 2007 Specific hard-coded addresses for IOS 12.318 on a 2621XM router Removes the requirement to authenticate and escalates to level 15 To protect the...
Shellcode - Win32 MessageBox (Metasploit module)
No description provided by source. $Id: messagebox.rb 4 2010-02-26 00:28:00:00Z corelanc0d3r & rick2600 $ Installation instructions : Drop file in framework3/modules/payloads/singles/windows folder Usage : ./msfpayload windows/messagebox TITLE=Corelan TEXT=Greetz to corelanc0d3r P require...