MS13-098: Vulnerability in Windows could allow remote code execution: December 10, 2013

None None...

Tape library and drives are shown as separate devices

Challenge Tape library and drives are shown as separate devices in console or loading tape into TapeDrive0 moves the tape into TapeDrive1 etc. Shown here, the Tape Library has no Tape Drive listed Shown here, the Tape Drive is separate from the Tape Library. Cause The tape library is not reportin...

Windows Enumerate LSA Secrets

This module will attempt to enumerate the LSA Secrets keys within the registry. The registry value used is: HKEYLOCALMACHINE\Security\Policy\Secrets\. Thanks goes to Maurizio Agazzini and Mubix for decrypt code from cachedump. This module requires Metasploit: https://metasploit.com/download...

Connection forcibly closed by remote host

Challenge While a job is processing, a job may intermittently fail while sending data from the source proxy to the target proxy/repository server with: srv| ERR |Server session thread has failed. srv| |An existing connection was forcibly closed by the remote host Cause This is related to a...

Zoner Photo Studio 15 Build 3 - Zps.exe Registry Value Parsing

Zoner Photo Studio 15 Build 3 - Zps.exe Registry Value Parsing !/usr/bin/python Exploit Title: Zoner Photo Studio v15 Build 3 Zps.exe Registry Value Parsing Local Buffer Overflow Version: 15 Build 3, Build 2 Date: 2012-11-09 Author: Julien Ahrens Homepage: http://www.inshell.net Software Link:...

Zoner Photo Studio 15 Build 3 Registry Value Parsing

!/usr/bin/python Exploit Title: Zoner Photo Studio v15 Build 3 Zps.exe Registry Value Parsing Local Buffer Overflow Version: 15 Build 3, Build 2 Date: 2012-11-09 Author: Julien Ahrens Homepage: http://www.inshell.net Software Link: http://www.zoner.com Tested on: Windows XP SP3 Professional Germa...

Zoner Photo Studio v15 Build 3 (Zps.exe) Registry Value Parsing Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Zoner Photo Studio v15 Build 3 Zps.exe Registry Value Parsing Local Buffer Overflow Version: 15 Build 3, Build 2 Date: 2012-11-09 Author: Julien Ahrens Homepage: http://www.inshell.net Software Link:...

Zoner Photo Studio 15 Build 3 - 'Zps.exe' Registry Value Parsing

!/usr/bin/python Exploit Title: Zoner Photo Studio v15 Build 3 Zps.exe Registry Value Parsing Local Buffer Overflow Version: 15 Build 3, Build 2 Date: 2012-11-09 Author: Julien Ahrens Homepage: http://www.inshell.net Software Link: http://www.zoner.com Tested on: Windows XP SP3 Professional Germa...

Bitsmith PS Knowbase 3.2.3 - Buffer Overflow Vulnerability

Document Title: =============== Bitsmith PS Knowbase 3.2.3 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=474 Release Date: ============= 2012-03-29 Vulnerability Laboratory ID VL-ID: ====================================...

Call execution timeout (100000 ms) (Veeam.Backup.SSH.PerlSoapException)

Article Applicability This article discusses an issue that only occurs when non-persistent Veeam Data Movers are used. The non-persistent data movers are only used when the account provided to Veeam Backup & Replication to connect to a Linux server does not have root or root-equivalent permission...

Prevx Registry value “KCSI” Exploit

Exploit for windows platform in category local exploits =================================== Prevx Registry value “KCSI” Exploit =================================== Prevx, trying to read the data contained in the registry value”\PCSI\KCSI”, and eventually make it null if it contains data...

Windows Telnet credential reflection

Added: 08/12/2009 CVE: CVE-2009-1930 BID: 35993 OSVDB: 56904 Background Microsoft Windows operating systems come with a telnet service. This service prompts a user to provide a login name and password. Following successful authentication, the server displays a shell prompt, allowing the user to r...

PT-2008-5939 · Hummingbird · Hummingbird Deployment Wizard

Name of the Vulnerable Software and Affected Versions: Hummingbird Deployment Wizard 2008 version 10.0.0.44 Description: The issue concerns insecure methods in the DeployRun.DeploymentSetup.1 ActiveX control, allowing remote attackers to execute arbitrary programs via the Run and PerformUpdateAsy...

CVE-2008-3775

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

Design/Logic Flaw

Folder Lock 5.9.5 and earlier uses weak encryption ROT-25 for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\pack registry value...

CVE-2008-0951

Microsoft Windows Vista does not properly enforce the NoDriveTypeAutoRun registry value, which allows user-assisted remote attackers, and possibly physically proximate attackers, to execute arbitrary code by inserting a 1 CD-ROM device or 2 U3-enabled USB device containing a filesystem with an...

Microsoft Windows fails to properly handle the NoDriveTypeAutoRun registry value

Overview Microsoft Windows fails to properly handle the NoDriveTypeAutoRun registry value, which may prevent Windows from effectively disabling AutoRun and AutoPlay features. Description AutoRun, which was introduced with Windows 95, is a feature that causes Windows to automatically take an actio...

taskmgr_dos.c.txt

include / -=- Credits -=- Coded by: SkyOut Found by: Izee Date: March 2008 Website: http://core-security.net/ -=- Timeline -=- Discovering the bug: December 2006 Exploit coded: December 2006 ... over one year of waiting ... Phone call with Microsoft Germany: February 2008 Email sent to Microsoft...

Symantec real-time scan service buffer overflow

Added: 06/13/2006 CVE: CVE-2006-2630 BID: 18107 OSVDB: 25846 Background Various Symantec products include a real-time virus scan service. Problem A buffer overflow in the real-time virus scan service allows remote attackers to execute arbitrary commands. Resolution Apply patch SYM06-010. Referenc...