MS12-021: Description of the security update for Visual Studio 2008 Service Pack 1: March 13, 2012

MS12-021: Description of the security update for Visual Studio 2008 Service Pack 1: March 13, 2012 Introduction Microsoft has released the security bulletin MS12-021. You can view the complete security bulletin by visiting one of the following Microsoft websites: Home users:...

MS11-049: Description of the security update for Visual Studio 2010: June 14, 2011

MS11-049: Description of the security update for Visual Studio 2010: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-049. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

MS11-025: Description of the security update for Visual Studio 2010: June 14, 2011

MS11-025: Description of the security update for Visual Studio 2010: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-025. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

MS12-021: Description of the security update for Visual Studio 2010: March 13, 2012

MS12-021: Description of the security update for Visual Studio 2010: March 13, 2012 Introduction Microsoft has released the security bulletin MS12-021. You can view the complete security bulletin by visiting one of the following Microsoft websites: Home users:...

A cumulative update is available for Team Foundation Server 2010 Service Pack 1

A cumulative update is available for Team Foundation Server 2010 Service Pack 1 Introduction A cumulative update CU is available for Microsoft Team Foundation Server TFS 2010 Service Pack 1 SP1. This CU resolves the issues that are described in the following Microsoft Knowledge Base KB article:...

Update rollup for Visual Studio 2010 Tools for Office Runtime

Update rollup for Visual Studio 2010 Tools for Office Runtime Symptoms This update installs the Visual Studio 2010 Tools for Office Runtime. This is required to run Microsoft Office-based solutions that are built by using Microsoft Visual Studio 2010, Visual Studio 2012, and Visual Studio 2013...

visualstudiomagazine.com XSS vulnerability

Vulnerable URL: https://visualstudiomagazine.com/issues/issue-archive.aspx?" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 64791 VIP website status:| No Check...

WinAPI User Hunter: hunter

WinAPI User Hunter During Red Team engagements it is common to track/hunt specific users. Assuming we already have access to a desktop as a normal user no matter how, always “assume compromise” in a Windows Domain and we want to spread laterally. We want to know where the user is logged on, if he...

Radium-Keylogger - Python keylogger with multiple features

Python keylogger with multiple features. Features Applications and keystrokes logging Screenshot logging Drive tree structure Logs sending by email Password Recovery for Chrome Mozilla Filezilla Core FTP CyberDuck FTPNavigator WinSCP Outlook Putty Skype Generic Network Cookie stealer Keylogger st...

Microsoft Extends Macro Protection to Office 2013

Microsoft is combating a surge in macro-based malware with a new feature that allows system administrators to configure Office 2013 to block Word, Excel, and PowerPoint macros. The capability had previously been introduced in March by Microsoft for its Office 2016 software. Microsoft said inciden...

Microsoft Visual Studio 2010 DLL Hijacking

===================================================== Microsoft Visual Studio 2010 - DLL Hijacking ===================================================== Vendor Homepage: https://www.visualstudio.com/ Date: 21 Oct 2016 Version : 10.0.30319.1 RTMRel Author: Ashiyane Digital Security Team Contact:...

openSUSE Security Update : postgresql93 (openSUSE-2016-1140)

The postgresql server postgresql93 was updated to 9.3.14 fixes the following issues : Update to version 9.3.14 : - Fix possible mis-evaluation of nested CASE-WHEN expressions CVE-2016-5423, boo993454 - Fix client programs' handling of special characters in database and role names CVE-2016-5424,...

[SECURITY] Fedora 23 Update: drupal7-panels-3.7-1.fc23

The Panels module allows a site administrator to create customized layouts for multiple uses. At its core it is a drag and drop content manager that lets you visually design a layout and place content within that layout. Integration with other systems allows you to create nodes that use this,...

Microsoft Office Information Disclosure Vulnerability (CNVD-2016-07925)

Microsoft Office is a suite of office software products developed by Microsoft.Visual Basic macros is one of the programming languages dedicated to performing common automation OLE tasks in desktop applications. An information disclosure vulnerability exists in Visual Basic macros in Microsoft...

CVE-2016-3375

The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow remote attackers to...

CVE-2016-0141

The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka "Microsoft Information Disclosure Vulnerability."...

Information disclosure

The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka "Microsoft Information Disclosure Vulnerability."...

CVE-2016-0141

CVE-2016-0141 is a Microsoft Office information-disclosure vulnerability. The issue arises in Visual Basic macros for Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016, where saving a document exports a certificate-store private key. The underlying risk is exposure of the user’s private key to an att...

CVE-2016-0141

The Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a certificate-store private key during a document-save operation, which allows attackers to obtain sensitive information via unspecified vectors, aka "Microsoft Information Disclosure Vulnerability."...

Microsoft Adds .NET Core, ASP.NET to Bug Bounty Program

Microsoft is stepping up its bug hunting efforts surrounding its Visual Studio development suite, adding Microsoft .NET Core and ASP.NET Core to its Bug Bounty program. The bounties opened yesterday and will run “indefinitely,” according to Microsoft. The bounty program includes the Windows and...