Security Update for Microsoft Office 2007 System (KB2289158)

A security vulnerability exists in the 2007 Microsoft Office System and the Compatibility Pack for the 2007 Office system that could allow remote code execution. This update resolves that vulnerability...

ProFTPd IAC 1.3.x - Remote Command Execution

ProFTPd IAC 1.3.x - Remote Command Execution Exploit Title: ProFTPD IAC Remote Root Exploit Date: 7 November 2010 Author: Kingcope E-DB Note: If you have issues with this exploit, alter lines 549, 555 and 563. use IO::Socket; $numtargets = 13; @targets = Plain Stack Smashing Confirmed to work...

Exploit Release : XAMPP 1.7.3 multiple Vulnerabilities

Exploit Title: XAMPP = 1.7.3 multiple vulnerabilites Author: TheLeader Software Link: https://www.apachefriends.org/en/xampp-windows.html Affected Version: 1.7.3 and prior Tested on Windows XP Hebrew, Service Pack 3 I. File disclosure : XAMPP is vulnerable to a remote file disclosure attack. The...

IBM DB2 9.7 < Fix Pack 3 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior Fix Pack 3. It is, therefore, affected by one or more of the following issues : - When privileges on a database object are revoked from PUBLIC, the dependent functions are not marked INVALID. As a result...

Nessus Client Insecure Library Loading Vulnerability

A vulnerability has been discovered in Nessus Client ,which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • Wintab32.dll This can be exploited to...

FlipAlbum Vista Pro Insecure Library Loading Vulnerability

A vulnerability has been discovered in FlipAlbum Vista Pro, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • dwmapi.dll This can be exploited...

ACDSee Photo Manager Insecure Library Loading Vulnerability

A vulnerability has been discovered in ACDSee Photo Manager,which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • dwmapi.dll This can be exploited...

Orbit Downloader Insecure Library Loading Vulnerability

A vulnerability has been discovered in Orbit Downloader ,which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • schannel.dll This can be exploited ...

WinMerge Insecure Library Loading Vulnerability

A vulnerability has been discovered in WinMerge,which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • mfc71enu.dll • mfc71loc.dll This can be...

Secunia PSI Insecure Library Loading Vulnerability

A vulnerability has been discovered in Secunia PSI,which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • Schannel.dll This can be exploited to loa...

DSquare Exploit Pack: D2SEC_JAVAWS3

Name| d2secjavaws3 ---|--- CVE| CVE-2010-3563 Exploit Pack| D2ExploitPack Description| Sun Java Web Start BasicServiceImpl Remote Code Execution Vulnerability Notes|...

Sahar Money Manager Insecure Library Loading Vulnerability

A vulnerability has been discovered in Sahar Money Manager, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: unicows.dll This can be exploited ...

Holoo Insecure Library Loading Vulnerability

A vulnerability has been discovered in Holoo, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to the application loading libraries in an insecure manner. Libraries list called is as follows: • idapi32.dll • idr20009.dll • odbc32.dll This c...

DSquare Exploit Pack: D2SEC_CDDAURI

Name| d2seccddauri ---|--- CVE| CVE-2010-3747 Exploit Pack| D2ExploitPack Description| RealNetworks RealPlayer ActiveX CDDA URI Uninitialized Pointer Remote Code Execution Vulnerability Notes|...

Acer OrbiCam 9.4.4.1084 DLL Hijacking

/ Acer OrbiCam 9.4.4.1084 DLL Hijacking Exploit mfc71ptb.dll and mfc71loc.dll Author: Inj3cti0n P4ck3t Contact e-mail: [email protected] Date: 18-10-2010 Operating System: Windows XP Version 5.1 Service Pack 3 Name Application: QuickCapture.exe Software Acer Orbicam 9.4.4.1084 Name DLL:...

win32/xp sp3 (ru) add local administrator in 74 bytes

Exploit for win32 platform in category shellcode ===================================================== win32/xp sp3 ru add local administrator in 74 bytes ===================================================== win32/xp sp3 ru add local administrator in 74 bytes...

VUPEN Security Research - Microsoft Office Word Document Buffer Overflow Vulnerability &#40;CVE-2010-2748&#41;

VUPEN Security Research - Microsoft Office Word Document Buffer Overflow Vulnerability CVE-2010-2748 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability ...

VUPEN Security Research - Microsoft Office Excel Formula Record Buffer Overflow Vulnerability &#40;CVE-2010-3231&#41;

VUPEN Security Research - Microsoft Office Excel Formula Record Buffer Overflow Vulnerability CVE-2010-3231 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Excel is a powerful tool you can use to create and format spreadsheets, and analyze and share...

Immunity Canvas: MS_KBLAYOUT

Name| mskblayout ---|--- CVE| CVE-2010-2744 Exploit Pack| CANVAS Description| MSKBLAYOUT Notes| CVE Name: CVE-2010-2744 VENDOR: Microsoft Notes: This is one of the vulnerabilities used by the Stuxnet work to elevate its privileges on Windows XP and Windows 2000. It may cause some minor side effec...

CVE-2010-3214

Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Word Viewer; Office Web Apps; and Word Web App allows remote...