146 matches found
For Kaspersky 2 0 1 0 the free kill study-vulnerability warning-the black bar safety net
Article author: chinafe For Kaspersky 2 0 1 0free to killresearch Kaspersky 2 0 1 0 for digital signing and System File Protection becomes very strict, the registry does not say that after so many years the upgrade is basically no use value, Kaspersky 2 0 1 0 the previous version can modify the...
Manually add a backdoor in the system service-vulnerability warning-the black bar safety net
Now many Trojans, backdoors, worms, viruses are is by modifying the registry RUN key value to be achieved from the start but this self-starting mode is not so hidden, slightly understand the point of security people generally find computers to be black will view the RUN key value then the system...
Microsoft Windows GDI文件大小参数堆溢出漏洞（MS08-071）
BUGTRAQ ID: 32637 CVECAN ID: CVE-2008-3465 Windows是微软发布的非常流行的操作系统。 Windows的GDI处理WMF文件中文件大小参数的方式中存在一个堆溢出漏洞。如果第三方应用程序使用特定的Microsoft API复制特制的WMF图像文件，就可以触发这个溢出，但成功利用这个漏洞最可能的结果是拒绝服务。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows...
3 3 8 9 new ideas-vulnerability warning-the black bar safety net
Copyright: BK instant group Author: BK group of a certain beverage 1. Can modify the registry 2. Can access 3 3 8 9 exec master..xpregwrite 'HKEYLOCALMACHINE','SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe','debugger','REGsz','c:\windows\system32\cmd.exe on';...
CVE-2008-4728
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the 1 Run and 2 PerformUpdateAsync methods, and 3 modify arbitrary registry values via...
Design/Logic Flaw
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the 1 Run and 2 PerformUpdateAsync methods, and 3 modify arbitrary registry values via...
CVE-2008-4728
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 DeployRun.dll ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the 1 Run and 2 PerformUpdateAsync methods, and 3 modify arbitrary registry values via...
Microsoft Office WPG图形文件处理堆溢出漏洞（MS08-044）
BUGTRAQ ID: 30598 CVECAN ID: CVE-2008-3021 Microsoft Office是非常流行的办公软件套件。 Office的WPGIMP32.FLT模块没有正确地处理office文档中的PICT图形，如果PICT图形文件中包含有超长的bitsperpixel字段的话，则打开该文件就可能触发堆溢出，导致执行任意代码。 Microsoft Office XP SP3 Microsoft Office Converter Pack Microsoft Office 2003 Service Pack 2 Microsoft Office 2000 SP3...
iDefense Security Advisory 08.12.08: Microsoft Windows Color Management Module Heap Buffer Overflow Vulnerability
iDefense Security Advisory 08.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 12, 2008 I. BACKGROUND Microsoft Windows Color Management Module provides consistent color mappings between different devices and applications. It is also used to transform colors between color spaces...
Through the NOD of memory why so trouble-vulnerability warning-the black bar safety net
You want to move the hard drive inside the aio to elsewhere, always to NOD32 kill, depressing the ball. Is there any method to go around? The method is, of course, the key to see you have no creativity, hehe. nod32 virus scanning before will first look at the file suffix is not an executable file...
Use python to modify the registry to get rid of 360safe-vulnerability warning-the black bar safety net
Article author: Wu Jie Information source: evil octal information security team www.eviloctal.com） import winreg import os import shutil Copy itself shutil. copyfile'K3.exe','c:\WINDOWS\system32\K3.exe' 3 6 0 start to its own run = winreg. OpenKey winreg. HKEYLOCALMACHINE,...
Microsoft Windows GDI文件名解析栈溢出漏洞（MS08-021）
BUGTRAQ ID: 28570 CVECAN ID: CVE-2008-1087 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的GDI函数在处理特制EMF图形文件中的文件名参数时存在栈溢出。如果用户受骗打开了特制的图形文件的话，就可能触发这个溢出，导致执行任意指令。 Microsoft Windows XP SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2...
iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability
iDefense Security Advisory 04.08.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 08, 2008 I. BACKGROUND Microsoft Windows graphics device interface GDI is the core library used to display graphics and text on the Windows operating system. It is the standard interface through which...
Image hijacking application-vulnerability warning-the black bar safety net
Usually wesince the start of the is mostly by the registry startup items, folders, startup items, services start, etc., however there is a people do not common since the start of the method, he is different from the file Association start, he was able to hijack a specific program, it explained fr...
cmd to modify the registry completely Raiders, containing the latest HIV through registry monitoring techniques-vulnerability warning-the black bar safety net
regedit not disclosed the parameters in cmd. regedit in the run parameters REGEDIT /L:system /R:user filename1 REGEDIT /L:system /R:user /C filename2 REGEDIT /L:system /R:user /E filename3 regpath /L:system Specifies the location of the SYSTEM. The DAT file. /R:user Specifies the location of the...
Design/Logic Flaw
The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."...
That one with Sam the FV key value to the hidden clone account method-vulnerability warning-the black bar safety net
| The principle is very simple Ah sam FV key value. focus on how to avoid detection Generally the detection of clone accounts is the detection of the sam inside there not the same FV. use this feature to bypass the detection. huh --- Step 1.net user allyesno freexploit /add&net localgroup...
Say a covert clone account method-vulnerability warning-the black bar safety net
Vulnerability discovery date 0 to 5 years a month Note: because of the recent how not concern of network security by memory, looks like nobody told you this method so put out the Do not shoot the bricks I thx you! The principle is very simple Ah sam FV key value. focus on how to avoid detection...
Create the perfect remote control software Radmin-vulnerability warning-the black bar safety net
Hello everyone, on how to create a perfect Radmin server, there are many online similar to the modified program, but some of the service names will be exposed, some will show the CMD window, I make up for their disadvantages, a combination of their advantages, to create a Now this perfect Radmin...
Hacking knowledge series of the Windows NT attacks Encyclopedia-vulnerability warning-the black bar safety net
Typically, the attacker will take the following way of the NT to initiate offense: 1, guess the decryption code hand-guess, automated guessing, the listener guessing; to 2, The remote exploit attack buffer overflow, denial of serviceDDos; the 3, upgrade permissions siphon information, modify the...