2066 matches found
Zemana AntiLogger 'AntiLog32.sys' 1.5.2.755 - Local Privilege Escalation
Zemana AntiLogger AntiLog32.sys elfanew; PVOID waddr = &pnthdr-OptionalHeader.DataDirectoryIMAGEDIRECTORYENTRYSECURITY.VirtualAddress ; ULONG oldp ; VirtualProtectwaddr , sizeofULONG , PAGEREADWRITE , &oldp; pnthdr-OptionalHeader.DataDirectoryIMAGEDIRECTORYENTRYSECURITY.VirtualAddress = 0x1 ;...
Microsoft Windows - 'srv2.sys' SMB Negotiate ProcessID Function Table Dereference (MS09-050) (Metasploit)
$Id: ms09050smb2negotiatefuncindex.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2010-2031
KAVSafe.sys 2010.4.14.609 and earlier, as used in Kingsoft Webshield 3.5.1.2 and earlier, allows local users to overwrite arbitrary kernel memory via a crafted request to IOCTL 0x830020d4 on the KAVSafe device...
avast! 4.7 aavmker4.sys privilege escalation
No description provided by source. !/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce -...
Avast! 4.7 - aavmker4.sys Local Privilege Escalation
Avast! 4.7 - aavmker4.sys Local Privilege Escalation !/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation http://www.trapkit.de/advisories/TKADV2008-002.txt CVE-2008-1625 Tested on WindXpSp2/Sp3 Dep ON Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti ...
Avast! 4.7 aavmker4.sys privilege escalation
Exploit for windows platform in category local exploits ============================================ Avast! 4.7 aavmker4.sys privilege escalation ============================================ !/usr/bin/python avast! 4.7 aavmker4.sys privilege escalation...
微点主动防御mp110013.sys驱动NtSystemDebugControl本地拒绝服务漏洞
微点主动防御软件是第三代反病毒软件。 微点主动防御软件所使用的mp110013.sys驱动没有正确处理NtSystemDebugControl内核API函数 WriteVirtual/WritePhysical中的Address/Buffer成员，本地用户可以通过运行恶意程序导致内核崩溃。 Micropoint Proactive Defense 100323.1.2.10581.0278.r1 厂商补丁： Micropoint ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.micropoint.com.cn/...
微点主动防御mp110013.sys驱动NtSetSystemTime的本地拒绝服务漏洞
微点主动防御软件是第三代反病毒软件。 微点主动防御软件所使用的mp110013.sys驱动没有正确处理NtSetSystemTime内核API函数的输入参数，本地用户可以通过运行恶意程序导致内核崩溃。 Micropoint Proactive Defense 100323.1.2.10581.0278.r1 厂商补丁： Micropoint ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.micropoint.com.cn/...
Micropoint Proactive Denfense Mp110013.sys <= 1.3.10123.0 Local Privilege Escalation Exploit
Micropoint Proactive Denfense Mp110013.sys = 1.3.10123.0 Local Privilege Escalation Exploit VULNERABLE PRODUCTS Micropoint Proactive Denfense = 100323.1.2.10581.0285.r1 mp110013.sys = 1.3.10123.0 DETAILS: mp110013.sys handles DeviceIoControl request which tells driver...
SIESTTA 2.0 - Local File Inclusion Cross-Site Scripting
SIESTTA 2.0 - Local File Inclusion Cross-Site Scripting SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn...
Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference
This module exploits an out of bounds function table dereference in the SMB request validation code of the SRV2.SYS driver included with Windows Vista, Windows 7 release candidates not RTM, and Windows 2008 Server prior to R2. Windows Vista without SP1 does not seem affected by this flaw. This...
Microsoft SRV2.SYS SMB2 Logoff Remote Kernel NULL Pointer Dereference
This module triggers a NULL pointer dereference in the SRV2.SYS kernel driver when processing an SMB2 logoff request before a session has been correctly negotiated, resulting in a BSOD. Effecting Vista SP1/SP2 And possibly Server 2008 SP1/SP2, the flaw was resolved with MS09-050. This module...
Micropoint Proactive Denfense Mp110013 <= 1.3.10123.0 Local Privilege
Exploit for windows platform in category local exploits ============================================================================================ Micropoint Proactive Denfense Mp110013.sys = 1.3.10123.0 Local Privilege Escalation Exploit...
Micropoint ProActive Denfense Mp110013.sys 1.3.10123.0 - Local Privilege Escalation
Micropoint ProActive Denfense Mp110013.sys 1.3.10123.0 - Local Privilege Escalation / Micropoint Proactive Denfense Mp110013.sys = 1.3.10123.0 Local Privilege Escalation Exploit VULNERABLE PRODUCTS Micropoint Proactive Denfense = 100323.1.2.10581.0285.r1 mp110013.sys = 1.3.10123.0 DETAILS:...
Micropoint ProActive Denfense 'Mp110013.sys' 1.3.10123.0 - Local Privilege Escalation
/ Micropoint Proactive Denfense Mp110013.sys = 1.3.10123.0 Local Privilege Escalation Exploit VULNERABLE PRODUCTS Micropoint Proactive Denfense = 100323.1.2.10581.0285.r1 mp110013.sys = 1.3.10123.0 DETAILS: mp110013.sys handles DeviceIoControl request which tells driver...
Micropoint Mp110003.sys <= 1.3.10123.0 Local Privilege Escalation Vulnerability
微点主动防御驱动mp110013.sys的允许用户态程序发送PspCreateProcessNotifyRoutineCount和PspCreateProcessNotifyRoutine相对于ntoskrnl的偏移给驱动，驱动定期在系统线程或在调用NtCreateProcessEx时,检查PspCreateProcessNotifyRoutineCount中的值是否小于初始化时从PspCreateProcessNotifyRoutine中计算的值，如果小于，就写回原始的值，从而造成了内核任意地址写入漏洞 mp.100323.1.2.10581.0278.r1 mp110013.sys...
微点主动防御 mp110013.sys <= 1.3.10123.0 本地拒绝服务漏洞
微点主动防御软件是第三代反病毒软件，颠覆了传统杀毒软件采用病毒特征码识别病毒的反病毒理念。微点主动防御软件采用主动防御技术能够自主分析判断病毒，解决了杀毒软件无法防杀层出不穷的未知木马和新病毒的弊端。 不正确地处理NtSetSystemTime的参数，引发本地拒绝服务漏洞 mp.100323.1.2.10581.0278.r1 mp110013.sys 1.3.10123.0 timestamp:4BA1863F checksum 1e7b8 暂无 等待官方补丁 http://www.micropoint.com.cn/ int mainint argc, char argv...
Oracle Database Server SYS.DBMS_METADATA_UTIL Package SQL Injection (CVE-2006-0260)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
Avast Antivirus 'aavmker4.sys' Denial Of Service Vulnerability - Windows
Avast AntiVirus is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Oracle Database Server DBMS_EXPORT_EXTENSION Package Privilege Escalation (CVE-2006-2081)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects are provided in order to better manage the data. The included stored procedures and functions, or subprograms,...