4115 matches found
Microsoft DirectShow Remote Code Execution Vulnerability (2929961)
This host is missing a critical security update according to Microsoft Bulletin MS14-013. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS14-013: Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2929961)
The remote Windows host is potentially affected by a vulnerability in Microsoft DirectShow that could allow remote code execution if a user opens a malicious image file. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72931; scriptversion"1.8"; scriptcvsdate"Date:...
HP Data Protector Backup Client Service Remote Code Execution Exploit
Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'HP Data Protector Backup Client Service Remote Code Execution', 'Description' = %q This module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in...
HP Data Protector - Backup Client Service Remote Code Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector Backup Client Service Remote Code Execution', 'Description' = %q This module abuses the Backup Client Service...
HP Data Protector Backup Client Service Remote Code Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector Backup Client Service Remote Code Execution', 'Description' = %q This module abuses the Backup Client Service...
Microsoft Windows SMB Registry : Windows 8.1 / Server 2012 R2 Service Pack Detection
It was possible to determine the service pack version of the Windows 8.1 / Server 2012 R2 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72543; scriptversion"1.5";...
MS14-005: Vulnerability in Microsoft XML Core Services Could Allow Information Disclosure (2916036)
The remote host contains a version of Microsoft XML Core Services that is affected by an information disclosure vulnerability that could allow an attacker to read files on the local file system of a user, or read content of web domains where a user is currently authenticated. C Tenable Network...
MS14-007: Vulnerability in Direct2D Could Allow Remote Code Execution (2912390)
The remote Windows host is affected by a remote code execution vulnerability due to the way Windows components handle 2D geometric figures. An attacker could exploit this vulnerability to take complete control over a target system by tricking a user into viewing a specially crafted figure in...
Microsoft Windows Direct2D Remote Code Execution Vulnerability (2912390)
This host is missing a critical security update according to Microsoft Bulletin MS14-007. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft VBScript Remote Code Execution Vulnerability (2928390)
This host is missing a critical security update according to Microsoft Bulletin MS14-011. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MS14-007: Vulnerability in Direct2D could allow remote code execution: February 11, 2014
None None...
SmarterMail Email正文HTML注入漏洞
Bugtraq ID:64970 SmarterMail是一款邮件服务程序。 SmarterMail不正确过滤Email正文数据，允许远程攻击者利用漏洞构建恶意邮件，诱使用户解析，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 SmarterMail 11.x 目前没有详细解决方案提供： http://www.smartertools.com/smartermail/mail-server-software.aspx ?php / Exploit Title: SmarterMail Enterprise and Standard =11.x Stored XSS Google...
Antimalware Support for Windows XP and the January 2014 Security Bulletin Webcast and Q&A
Today we’re publishing the January 2014 Security Bulletin Webcast Questions & Answers page. We answered 16 questions in total, with the majority of questions focusing on the Dynamics AX bulletin MS14-004, the update for Microsoft Word MS14-001 and the re-release of the Windows 7 and Windows Serve...
CVE-2014-0261
Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service instance outage via crafted data to an Application Object Server AOS instance, aka "Query Filter DoS Vulnerability."...
Design/Logic Flaw
win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Server 2008 R2 SP1 does not properly consider thread-owned objects during the processing of window handles, which allows local users to gain privileges via a crafted application, aka "Win32k Window Handle Vulnerability."...
CVE-2014-0262
win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 and Server 2008 R2 SP1 does not properly consider thread-owned objects during the processing of window handles, which allows local users to gain privileges via a crafted application, aka "Win32k Window Handle Vulnerability."...
Microsoft Windows Kernel-Mode Drivers Privilege Escalation Vulnerability (2913602)
This host is missing an important security update according to Microsoft Bulletin MS14-003 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Kernel 'Win32k.sys' CVE-2014-0262 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with escalated privileges. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferenci...
HP Data Protector Backup Client Service Remote Code Execution
This module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in the EXECBAR operation, which allows to execute arbitrary processes. This module has been tested successfully on HP Data Protector 6.20 on Windows 2003 SP2 and Windows 2008 R2...