Microsoft Windows Task Scheduler CVE-2015-2525 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with elevated privileges in the context of the affected computer. Technologies Affected Avaya Meeting Exchange - Client Registration Server 6.0...

Microsoft Office CVE-2015-2523 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

AutoCAD DWG and DXF To PDF Converter 2.2 - Local Buffer Overflow

Exploit Title: AutoCAD DWG and DXF To PDF Converter v2.2 Buffer Overflow Date: 9-5-2015 Software Link: http://www.verypdf.com/autocad-dwg-dxf-to-pdf/dwgdxftopdfsetup.exe Exploit Author: Robbie Corley Contact: [email protected] Website: CVE: Category: Local Exploit Description: The title...

ZSNES 1.51 - Local Buffer Overflow

Exploit Author: Juan Sacco - http://www.exploitpack.comp Tested on: GNU/Linux - Kali Linux 2.0 Description: ZSNES v1.51 and prior is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied input. An attacker could...

Ruby on Rails: DoS Attack in Controller Lookup Code

Object leak vulnerability for wildcard controller routes in Action Pack There is an object leak vulnerability for wildcard controllers in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2015-7581. Versions Affected: = 4.0.0 and 5.0.0.beta1 Not affected: 4.0.0, 5.0.0.beta1...

Memory corruption

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server...

CVE-2015-2468

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server...

CVE-2015-2468: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server...

Microsoft SharePoint Server WAS Remote Code Execution Vulnerability (3080790)

This host is missing an important security update according to Microsoft Bulletin MS15-081. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Office Compatibility Pack Multiple Remote Code Execution Vulnerabilities (3080790)

This host is missing an important security update according to Microsoft Bulletin MS15-081. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PCMan FTP Server 2.0.7 - PUT Command Buffer Overflow Exploit

PCMan FTP Server version 2.0.7 PUT command buffer overflow exploit that spawns a bindshell on tcp/9988. !/usr/bin/python title: PCMan FTP Server v2.0.7 Buffer Overflow - PUT Command author: @shipcod3 Jay Turla nc 9988 Tested on Windows XP Service Pack 3 - English description: Buffer overflow is...

WordPress Mobile Pack Information Disclosure Vulnerability

This module exploits an information disclosure vulnerability in WordPress Plugin "WP Mobile Pack" version 2.1.2, allowing to read files with privileges information. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework clas...

WordPress Admin Pack by Site Caseiro Plugin <= 1.1 - Stored XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution No fix available...

WordPress Admin Pack by Site Caseiro Plugin <= 1.1 - Stored XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution No fix available...

Admin Pack by SITE CASEIRO <= 1.1 - Authenticated Stored Cross-Site Scripting (XSS)

The admin-pack-by-site-caseiro WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...

WordPress Admin Pack By Site Caseiro 1.1 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Title: WordPress 'Admin Pack by SITE CASEIRO' Plugin Version: 1.1 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-14 Download: - https://wordpress.org/plugins/admin-pack-by-site-caseiro/ -...

Microsoft Office Compatibility Pack Code Execution

The vulnerability of the Microsoft Office Compatibility Pack is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure using a specially crafted document...

Microsoft Office Compatibility Pack Code Execution

The vulnerability of the Microsoft Office Compatibility Pack is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure using a specially crafted document...

Microsoft Office Compatibility Pack Code Execution

The vulnerability of the Microsoft Office Compatibility Pack is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure using a specially crafted document...

WordPress Admin Pack By Site Caseiro 1.1 Cross Site Scripting

Title: WordPress 'Admin Pack by SITE CASEIRO' Plugin Version: 1.1 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-14 Download: - https://wordpress.org/plugins/admin-pack-by-site-caseiro/ - https://plugins.svn.wordpress.org/admin-pack-by-site-caseiro/ Notified WordPress: 2015-06-...