MS KB2927432: Visual Studio Update 2 for Debug Interface Access SDK

The version of the Microsoft Debug Interface Access Library on the remote host is affected by a memory corruption vulnerability related to parsing PDB files. An attacker could exploit this issue by tricking a user into loading a malicious file. This could allow an attacker to execute arbitrary co...

CVE-2014-3802

msdia.dll in Microsoft Debug Interface Access DIA SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-3802

msdia.dll in Microsoft Debug Interface Access DIA SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2014-3802

The CVE-2014-3802 issue affects msdia.dll (Microsoft Debug Interface Access Library) in Visual Studio prior to 2013. The root cause is a failure to validate an unspecified variable when calculating a dynamic-call address while parsing PDB files, leading to memory corruption. Impact per sources: r...

CVE-2013-5042

Cross-site scripting XSS vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka "SignalR XSS...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka "SignalR XSS...

CVE-2013-5042

Cross-site scripting XSS vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka "SignalR XSS...

CVE-2013-5042

CVE-2013-5042 is a cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x (before 1.1.4) and 2.0.x (before 2.0.1), and in Visual Studio Team Foundation Server 2013. The weakness allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport...

Microsoft VS Team Foundation Server SignalR XSS Vulnerability (2905244)

This host is missing an important security update according to Microsoft Bulletin MS13-103. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft ASP.NET SignalR CVE-2013-5042 Cross Site Scripting Vulnerability

Description Microsoft ASP.NET SignalR is prone to a cross-site scripting vulnerability because it fails to properly encode user input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This could allow...

MS13-103: Description of the security update for Microsoft Visual Studio Team Foundation Server 2013: December 10, 2013

None None...

Windows RT ARM - Bind Shell Port 4444

Windows RT ARM - Bind Shell Port 4444. Shellcode exploit for arm platform ; Title: Windows RT ARM Bind Shell Port 4444 ; Date: July 28, 2013 ; Author: Matthew Graeber @mattifestation ; Blog post: http://www.exploit-monday.com/2013/07/WinRT-ARM-Shellcode.html ; Tested on: Microsoft Surface RT Tabl...

Microsoft Visual Studio .NET Remote Code Execution Vulnerability (2848295)

This host is missing a critical security update according to Microsoft Bulletin MS13-054. OpenVAS Vulnerability Test $Id: secpodmsvisualstudiodotnetms13-054.nasl 6115 2017-05-12 09:03:25Z teissa $ Microsoft Visual Studio .NET Remote Code Execution Vulnerability 2848295 Authors: Antu Sanadi...

Microsoft Visual Studio .NET Remote Code Execution Vulnerability (2848295)

This host is missing a critical security update according to Microsoft Bulletin MS13-054. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-3129

Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows ...

PT-2013-4160 · Microsoft · Lync +13

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 3.0 SP2 through 4.5 Silverlight version 5 before 5.1.20513.0 Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 versions SP2 and R2 SP1 Windows 7...

Microsoft Windows TrueType Font CVE-2013-3129 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will result in the execution of arbitrary code in kernel-mode. Failed attempts will cause a denial-of-service condition. The attacker can also exploit this issue through Microsoft Silverlight,...

July 2013 Microsoft Patch Tuesday Security Updates

A critical Windows kernel vulnerability, publicly disclosed in May by a Google security engineer, will be patched tomorrow when Microsoft releases its July Patch Tuesday security updates. Tavis Ormandy, who has controversially disclosed Windows vulnerability details in the past, made a posting to...

Microsoft Visual Studio Team Foundation Server crossite scripting

No description provided...

Microsoft Visual Studio Team Foundation Server跨站脚本执行漏洞（MS12-061)

BUGTRAQ ID: 55409 CVE ID: CVE-2012-1892 Microsoft Visual Studio Team Foundation Server是微软应用生命周期管理解决方案的核心协作平台，可实现软件递送流程自动化，包括有效管理软件开发项目的工具。 Microsoft Visual Studio Team Foundation Server存在反射XSS漏洞,可允许攻击者注入客户端脚本到IE的用户实例中或所有通过Team Foundation Server Web访问的Web浏览器中。该脚本可欺骗内容、泄露信息、以目标用户权限执行任意操作。 0 Microso...