1320 matches found
CVE-2014-2780
CVE-2014-2780 corresponds to a DirectShow elevation-of-privilege vulnerability in Microsoft Windows (affecting Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8, 8.1, and Server 2012). The root cause is an input-validation flaw in DirectShow when processing unserialized Stretch objects, enabling lo...
CVE-2014-1824
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal aka .JNT file, aka "Windows Journal Remot...
Security Update for Windows 8 (KB2972280)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Security Update for Windows 8 (KB2961072)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Microsoft Windows On-Screen Keyboard CVE-2014-2781 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary programs with elevated privileges. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing 6.0 Standard Avaya Aura...
MS14-041: Vulnerability in Microsoft DirectShow Could Allow Elevation of Privilege (2975681)
The remote Windows host is affected by a vulnerability in Microsoft DirectShow that could allow privilege escalation. Note that this issue can only be exploited if an attacker first successfully exploits another vulnerability in a low integrity process. C Tenable Network Security, Inc...
Microsoft Windows Ancillary Function Driver CVE-2014-1767 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...
Browser Password Remover - Browser Website Login Password Removal Software
Browser Password Remover is the free software to quickly display and remove all the stored website login passwords from popular browsers. Most of the web browsers allow users to remember passwords and stores them into local database file. This file and all the stored passwords within it can be...
ABBS Audio Media Player 3.1 - (.lst) Buffer Overflow
No description provided by source. !/usr/bin/python Exploit Title: ABBS Audio Media Player v3.1 .lst Buffer Overflow Version: v3.1 Date: 2013-05-04 Author: Julien Ahrens @MrTuxracer Homepage: http://www.inshell.net Software Link: http://abbs.qsnx.net/ Tested on: Windows XP SP3 DE Windows 7 SP1...
KMPlayer 3.7.0.109 (.wav) - Crash PoC
No description provided by source. Exploit Title: KMPlayer 3.7.0.109 Integer division by zero DoS. Date: 29-9-2013 Exploit Author: xboz Vendor Homepage: http://www.kmpmedia.net/ Software Link: http://update.kmpmedia.net/player/download/28 Version: 3.7.0.109 Tested on: Windows 7,8 header =...
Beetel 450TC2 Router Admin Password CSRF Vulnerability
No description provided by source. ??!-- Exploit Title: Beetel 450TC2 Router Admin Password Cross Site Request Forgery Vulnerability Date: 30/04/2014 Exploit Author: shyamkumar somana Vendor Homepage: www.beetel.in Version: 450TC2 - Firmware version : TX6-0Q-005retail Tested on: Windows 8 Beetel...
AuraCMS 3.0 - Multiple Vulnerabilities
No description provided by source. Exploit Title: AuraCMS 3.0 Multiple Vulnerabilities Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL :http://auracms.org/ Software Link: http://codeload.github.com/auracms/AuraCMS/zip/master Vuln Category: CWE-79 XSS - CWE-98 LFI Tested on: AuraCMS 3.0...
Cartweaver 3 Local File Inclusion Vulnerability
No description provided by source. Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the He...
Adobe Flash Player Shader Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer def...
Portix-CMS 1.5.0. rc5 Local File Inclusion Vulnerability
No description provided by source. -==================== in The Name Of aLLah ====================- Title: Portix-CMS 1.5.0. rc5 Local File Inclusion Google Dork: inurl:livriel.php?livriel= Date: n/a Author: Or4nG.M4n Link: http://www.easy-script.com/scripts-PHP/portix-cms-150-rc5-3005.html...
Easy File Management Web Server Stack Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking Reliable memory corruption include...
Wireshark 1.10.7 - DoS PoC
No description provided by source. !/usr/bin/python Exploit Title: Wireshark Read Access Violation near NULL starting at libcairo2!cairoimagesurfacegetdata Date: May 15th 2014 Author: Osanda Malith Jayathissa E-Mail: osandajayathissaatgmail.com Version: 1.10.7 32-bit and 64-bit Vendor Homepage:...
Windows NT - Windows 8 EPATHOBJ Local Ring 0 Exploit
No description provided by source. ifndef WIN32NOSTATUS define WIN32NOSTATUS endif include stdio.h include stdarg.h include stddef.h include windows.h include assert.h ifdef WIN32NOSTATUS undef WIN32NOSTATUS endif include ntstatus.h pragma commentlib, gdi32 pragma commentlib, kernel32 pragma...
Novell Client 2 SP3 - Privilege Escalation Exploit
No description provided by source. Novell Client 2 SP3 Privilege escalation exploit Tested on Windows 7 and 8 x86 / nicm.sys 3.1.11.0 Thanks to Master Ryujin : The first public information I have seen about this bug was from Nikita Tarakanov @NTarakanov I am not sure weather there was anything el...
Remote DLL - Simple & Free Tool to Inject or Remove DLL from Remote Process
RemoteDLL is the simple tool to Inject DLL or Remove DLL from Remote Process. It is based on popular Dll Injection technique. It supports following DLL Injection methods CreateRemoteThread NtCreateThread Good for DLL Injection across sessions on Vista/Windows 7 QueueUseAPC Delayed Injection...