187 matches found
CVE-2014-5854
The Windows Live Hotmail PUSH mail aka com.clearhub.wl application 1.00.97 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Windows Live Messenger <= 14.0.8117 Animation Remote Denial of Service
No description provided by source. Exploit Title: Windows Live Messenger = 14.0.8117 animation remote Denial of Service Date: 11/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://explore.live.com/windows-live-messenger Version: 14.0.8117 and prior Tested on: Windo...
Windows Live Email DLL Hijacking Exploit (dwmapi.dll)
No description provided by source. / Exploit Title: Windows Live Email DLL Hijacking Exploit dwmapi.dll Date: 24/08/2010 Author: Nicolas Krassas http://twitter.com/Dinosn Version: Latest windows live suite Tested on: Windows XP SP3 The code is based on the exploit from TheLeader Vulnerable...
windows live messenger plus! fileserver 1.0 - Directory Traversal vuln
No description provided by source. Windows Live Messenger Plus! FileServer 1.0 Found by joepie91 The FileServer script allows a user using Windows Live Messenger Plus! to share a defined folder and its subfolders and files with a contact. Authentication is done using a user-defined username and...
MSN Messenger UIAutomation ActiveX Control Information Disclosure (MS08-050) - Ver2 (CVE-2008-0082)
Windows Messenger, MSN Messenger, and Windows Live Messenger are popular instant messaging clients for Microsoft Windows. An information disclosure vulnerability exists in Windows Messenger, MSN Messenger, and Windows Live Messenger. The vulnerability is caused by an ActiveX control that is marke...
[MailPasswordDecryptor v4.0] All-in-one eMail Password Recovery Software
Mail Password Decryptor is the FREE software to instantly recover Mail Account passwords from popular email clients and other desktop applications. You can recover your lost password for email accounts like Gmail, Yahoo Mail, Hotmail or Windows Live Mail from email applications such as Microsoft...
Windows Live Movie Maker 2011 Denial Of Service
!/usr/bin/env ruby Title: Windows Live Movie Maker 2011 .wav DoS Local Exploit Version: Version 2011 Build 15.4.53508.1109 Tested on: Windows 7 Professional 32-bit SP1 E-Mail: [email protected] Exploit-Author: Osanda Malith Jayathissa Video: https://www.youtube.com/watch?v=SBJYzSNdY6k /!...
[MailPasswordDecryptor] All-in-one Mail Password Recovery Software
Mail Password Decryptor is the FREE software to instantly recover Mail Account passwords from popular email clients and other desktop applications. You can recover your lost password for email accounts like Gmail, Yahoo Mail, Hotmail or Windows Live Mail from email applications such as Microsoft...
[Network Password Decryptor v6.0] Windows Network Password Recovery Tool
Network Password Decryptor is the free tool to instantly recover network authentication passwords. In addition to the network authentication passwords it can also recover passwords stored by other windows apps such as Outlook , Windows Live Messenger , Remote Destktop etc. These network passwords...
Windows Live Essentials Version Detection
Detects the installed version of Windows Live Essentials on Windows. The script logs in via smb, searches for Windows Live Essentials in the registry, gets the from registry. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
Windows Live Essentials Improper URI Handling Vulnerability (MS13-045; CVE-2013-0096)
An information disclosure vulnerability exists when Windows Live Writer fails to properly handle a specially crafted URL. An attacker who successfully exploited this vulnerability could perform various actions on behalf of the logged-on user. These actions include the ability to overwrite files a...
MS13-045: Vulnerability in Windows Essentials could allow information disclosure: May 14, 2013
Resolves a vulnerability in Windows Live Writer that could allow information disclosure if a user opens Writer by using a specially crafted URL.INTRODUCTIONMicrosoft has released security bulletin MS13-045. To view the complete security bulletin, go to one of the following Microsoft websites: Hom...
Microsoft MSN Messenger and Windows Live Messenger Code Execution - improved performance (CVE-2007-2931)
MSN Messenger is an instant messaging application developed by Microsoft. It was renamed to Windows Live Messenger in recent releases. MSN Messenger provides communicating features such as voice conversations, video conference, files transferring and online games. There exists a buffer overflow...
DEBIAN-CVE-2013-0240
Gnome Online Accounts GOA 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating accounts such as Windows Live and Facebook accounts, which allows man-in-the-middle attackers to obtain sensitive information such as credentials by sniffing the...
Microsoft censors The Pirate Bay links on Windows Live Messenger
Microsoft censors The Pirate Bay links on Windows Live Messenger Microsoft has decided to block access to The Pirate Bay from Windows Live Messenger. When users try to send an instant message to a friend with a link from The Pirate Bay, Windows Live Messenger displays a warning, saying that the...
Windows Live Writer ActiveX DoS (WindowsLiveWriter.Application.dll)
Exploit for windows platform in category dos / poc Title: Windows Live Writer ActiveX DoS WindowsLiveWriter.Application.dll Author: Dmar al3noOoz Mail : email protected Software Link : http://explore.live.com/ Version: 14.0.8117.416 Tested on: Windows XP targetFile = "C:\Program Files\Windows...
Microsoft Windows Phone 7.5消息处理拒绝服务漏洞
Bugtraq ID: 51179 Microsoft Windows Phone是一款智能手机设备,基于移动windows操作系统 Microsoft Windows Phone处理消息存在错误,攻击者可以构建特制文本消息通过SMS, Facebook chat或Windows Live发送,使目标用户设备重启或处理消息相关的功能不能使用 0 Microsoft Windows Phone 7.5 厂商解决方案 目前没有详细解决方案提供: http://www.microsoft.com/windowsmobile/default.mspx...
Mandriva Update for libmsn MDVA-2011:081-1 (libmsn)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
XSS Ebuddy (responsible disclosure)
Early this morning, the security group Virtual Luminous published a vulnerability in 'Ebuddy Web Messenger' and we would like to inform you that this vulnerability had been discovered and reported to the vendor on June 5th, 2011 by DcLabs Security Research Group. In the report below you are going...
Windows Live OneCare Unsupported Application Detection
Windows Live OneCare, an antivirus application, is installed on the remote Windows host. Official support for Windows Live OneCare ended on April 11, 2011. As a result, the application may contain critical vulnerabilities and will not detect the latest malware. C Tenable Network Security, Inc...