Nidesoft MP3 Converter 2.6.18 - Local Buffer Overflow (SEH)

Nidesoft MP3 Converter 2.6.18 - Local Buffer Overflow SEH !python Exploit title: MP3 converter v 2.6.18 License code SEH exploit Date: 2016-12-15 Vendor homepage: http://www.nidesoft.com/mp3-converter.html Download: http://www.nidesoft.com/downloads/mp3-converter.exe Tested on: Win7 SP1 Author:...

Internet Explorer help

None None...

openSUSE Security Update : qemu (openSUSE-2016-1451)

This update for qemu fixes the following issues : - Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE12-SP1 - Change package post script udevadm trigger calls to be device specific bsc1002116 - Address various security/stability issues - Fix OOB access in...

Microsoft SQL Server 2012 SP1 11.0.3300.0 through 11.0.3492.0 Multiple Vulnerabilities (3045317)

Binary data 9819.prm...

10-Strike Network File Search Pro 2.3 Buffer Overflow

!python Exploit title: 10-Strike Network File Search Pro 2.3 Registration code SEH exploit Date: 2016-12-10 Vendor homepage: https://www.10-strike.com/network-file-search/help/pro.shtml Download: https://www.10-strike.com/network-file-search/network-file-search-pro.exe Tested on: Win7 SP1 Author:...

10-Strike Network File Search Pro 2.3 - SEH Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits !python Exploit title: 10-Strike Network File Search Pro 2.3 Registration code SEH exploit Date: 2016-12-10 Vendor homepage: https://www.10-strike.com/network-file-search/help/pro.shtml Download:...

10-Strike Network File Search Pro 2.3 - Local Buffer Overflow (SEH)

10-Strike Network File Search Pro 2.3 - Local Buffer Overflow SEH !python Exploit title: 10-Strike Network File Search Pro 2.3 Registration code SEH exploit Date: 2016-12-10 Vendor homepage: https://www.10-strike.com/network-file-search/help/pro.shtml Download:...

openSUSE Security Update : mariadb (openSUSE-2016-1417)

This mariadb update to version 10.0.28 fixes the following issues bsc1008318 : Security fixes : - CVE-2016-8283: Unspecified vulnerability in subcomponent Types bsc1005582 - CVE-2016-7440: Unspecified vulnerability in subcomponent Encryption bsc1005581 - CVE-2016-5629: Unspecified vulnerability i...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:3039-1)

The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various critical security fixes. The following security bugs were fixed : - CVE-2016-8655: A race condition in the afpacket packetsetring function could be used by local attackers to crash the kernel or gain privileges bsc1012754. -...

Security update for mariadb (important)

This mariadb update to version 10.0.28 fixes the following issues bsc1008318: Security fixes: - CVE-2016-8283: Unspecified vulnerability in subcomponent Types bsc1005582 - CVE-2016-7440: Unspecified vulnerability in subcomponent Encryption bsc1005581 - CVE-2016-5629: Unspecified vulnerability in...

Microsoft Event Viewer 1.0 - XML External Entity Injection Vulnerability

Exploit for windows platform in category local exploits + Credits: John Page aka hyp3rlinx Vendor: ================= www.microsoft.com Product: ======================== Microsoft Event Viewer Version: 1.0 The Windows Event Viewer shows a log of application and system messages – errors, informatio...

Microsoft Event Viewer 1.0 - XML External Entity Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EVENT-VIEWER-XXE-FILE-EXFILTRATION.txt + ISR: ApparitionSec + CVE: CVE-2019-0948 Vendor: ================= www.microsoft.com Product: ========================...

DiskSavvy Enterprise GET Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in the web interface of DiskSavvy Enterprise v9.1.14 and v9.3.14, caused by improper bounds checking of the request path in HTTP GET requests sent to the built-in web server. This module has been tested successfully on Windows XP SP...

Disk Sorter Enterprise 9.1.12 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python print "Disk Sorter Enterprise 9.1.12 Login Buffer Overflow" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTEM...

Dup Scout Enterprise 9.1.14 Buffer Overflow

!/usr/bin/python print "Dup Scout Enterprise 9.1.14 Login Buffer Overflow" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTEM You do not need to be authenticated, password below is...

Moxa SoftCMS 1.5 - Denial of Service (PoC)

''' Title: Moxa SoftCMS 1.5 AspWebServer Denial of Service Vulnerability Author: Zhou Yu Email: [email protected] Vendor: http://www.moxa.com/ Versions affected: 1.5 or prior versions Test on: Moxa SoftCMS 1.5 on Windows 7 SP1 x32 CVE: CVE-2016-9332 Advisory:...

CVE-2016-7250

CVE-2016-7250 affects Microsoft SQL Server 2014 SP1/ SP2 and 2016. The vulnerability arises from an improper cast of an unspecified pointer in the SQL RDBMS Engine, enabling remote authenticated users to escalate privileges via unknown vectors. The issue is part of MS16-136 family of fixes; the r...

MS16-133: Description of the security update for Word 2013: November 8, 2016

MS16-133: Description of the security update for Word 2013: November 8, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

November 2016 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

November 2016 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security updates includes improvements and fixes from update 3192403. To learn more about the non-security improvements and fixes in this update, see the October 18, 2016 — KB3192403 Previe...

openSUSE: Security Advisory for systemd (openSUSE-SU-2016:2539-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...