CVE-2011-0086

CVE-2011-0086 pertains to win32k.sys in affected Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, Windows 7) where user-mode input is not properly validated by kernel-mode drivers. This enables local privilege escalation via a crafted application. Acknowledge...

CVE-2011-0086

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, ak...

Joomla! XSS Vulnerability

Joomla! is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

GIMP 2.6.7 - Multiple File Plugins Remote Stack Buffer Overflow Vulnerabilities

GIMP 2.6.7 - Multiple File Plugins Remote Stack Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/45647/info GIMP is prone to multiple remote stack-based buffer-overflow vulnerabilities because it fails to perform adequate checks on user-supplied input. Successfully...

NitroSecurity ESM 8.4.0a Remote Code Execution

-- Product description: NitroView ESM is an enterprise-class security information and event management system that identifies, correlates, and remediates threats faster than any other SIEM on the market. -- Problem Description: During research it was found that perl module "ess.pm" is prone to...

NitroSecurity ESM v8.4.0a Remote Code Execution

Exploit for linux platform in category remote exploits =============================================== NitroSecurity ESM v8.4.0a Remote Code Execution =============================================== -- Product description: NitroView ESM is an enterprise-class security information and event...

NitroSecurity ESM 8.4.0a - Remote Code Execution

NitroSecurity ESM 8.4.0a - Remote Code Execution -- Product description: NitroView ESM is an enterprise-class security information and event management system that identifies, correlates, and remediates threats faster than any other SIEM on the market. -- Problem Description: During research it w...

NitroSecurity ESM 8.4.0a - Remote Code Execution

-- Product description: NitroView ESM is an enterprise-class security information and event management system that identifies, correlates, and remediates threats faster than any other SIEM on the market. -- Problem Description: During research it was found that perl module "ess.pm" is prone to...

Microsoft Windows Mobile - Overly Long vCard Name Field Denial of Service

source: https://www.securityfocus.com/bid/44287/info Microsoft Windows Mobile is prone to a denial-of-service vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this issue to crash a device running Windows Mobile, denying service to legitimate users...

Microsoft Excel Ghost Record Type Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability because the applications fails sufficiently validate user-supplied input. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits can allow attackers...

Lantern CMS - '11-login.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43865/info Lantern CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Evaria ECMS <= 1.1 Directory Traversal Vulnerability

Evaria ECMS is prone to a local file disclosure vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Flock Browser RSS Feed Cross site scripting Vulnerability

Flock browser is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows win32k.sys驱动用户输入验证本地权限提升漏洞（MS10-048）

BUGTRAQ ID: 42210 CVE ID: CVE-2010-1896 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中的win32k.sys内核驱动没有正确地验证用户态输入，本地用户可以通过执行恶意应用程序导致执行任意内核态代码。 Microsoft Windows XP SP3 Microsoft Windows XP Pro x64版SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft...

TPO Duyuru Scripti - Insecure Cookie Authentication Bypass

TPO Duyuru Scripti - Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/40519/info TPO Duyuru Scripti is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can explo...

dl_stats - Multiple Vulnerabilities

:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |:: Advisory/Exploit Title = dlstats Multiple Vulnerabilitie |:: Author = Valentin Hoebel |:: Contact = [email protected] |:: |:: :::::::::::::::::::::::::::::::::::::: 0x2...

AneCMS 1.0 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/39416/info AneCMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local...

CuteNews/UTF-8 CuteNews Multiple Vulnerabilities

CuteNews/UTF-8 CuteNews is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cutephp:cutenews";...

Novell ZENworks Patch Management Multiple SQL Injection Vulnerabilities (CVE-2005-3315)

ZENworks is a resource management solution developed by Novell. The product provides system administrators with management capabilities of remote networked computers. The software suite is composed of several product components. Some of the available ZENworks product components are ZENworks Deskt...

MyBB 1.4.8 SQL Injection

mybb v1.4.8 search.php blind/query based sql injection vulns author: $qLDoCt0r msn: [email protected] blog: http://full-discl0sure.blogspot.com moderator of: http://hackwarez.net search.php fails to correctly sanitise the user input validation allowing error based and query based sql...