CVE-2019-1287

The CVE-2019-1287 entry describes an elevation-of-privilege vulnerability in the Windows Network Connectivity Assistant, caused by how the component handles objects in memory. Affected: Windows OS component Windows Network Connectivity Assistant. Consequence: local privilege elevation with high i...

The vulnerability of the Windows Network File System (NFS) protocol in Windows operating systems arises from improper handling of objects in memory, allowing attackers to exploit their privileges.

The vulnerability of the Windows Network File System NFS protocol in Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Design/Logic Flaw

An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arguments into the Origin process and ultimately leverage code execution by loading a backdoored Qt plugin remotely via t...

CVE-2019-12828

An issue was discovered in Electronic Arts Origin before 10.5.39. Due to improper sanitization of the origin:// and origin2:// URI schemes, it is possible to inject additional arguments into the Origin process and ultimately leverage code execution by loading a backdoored Qt plugin remotely via t...

CVE-2019-1045

An elevation of privilege vulnerability exists in the way that the Windows Network File System NFS handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could...

CVE-2019-1045

An elevation of privilege vulnerability exists in the way that the Windows Network File System NFS handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could...

KLA11874 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

CVE-2019-0688

An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'...

PT-2018-2078 · Microsoft · Windows 10 Servers +6

Name of the Vulnerable Software and Affected Versions: Windows Server 2012 R2 Windows RT 8.1 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description: An information disclosure issue exists due to the improper handling of fragmented IP packets by the Windows TCP/IP stack. This ca...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2013:1288-1)

java-170-openjdk was updated to icedtea-2.4.1 bnc828665 - Security fixes - S6741606, CVE-2013-2407: Integrate Apache Santuario - S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls - S7170730, CVE-2013-2451: Improve Windows network stack support. - S8000638, CVE-2013-2450: Improv...

SuSE 11.3 Security Update : java-1_7_0-openjdk (SAT Patch Number 8090)

This update to icedtea-2.4.1 fixes various security issues : - S6741606, CVE-2013-2407: Integrate Apache Santuario - S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls - S7170730, CVE-2013-2451: Improve Windows network stack support. - S8000638, CVE-2013-2450: Improve...

SuSE 11.2 Security Update : java-1_6_0-openjdk (SAT Patch Number 8084)

java-160-openjdk has been updated to Icedtea6-1.12.6 version. Security fixes : - S6741606, CVE-2013-2407: Integrate Apache Santuario - S7158805, CVE-2013-2445: Better rewriting of nested subroutine calls - S7170730, CVE-2013-2451: Improve Windows network stack support. - S8000638, CVE-2013-2450:...

File Level restore of a Linux VM cannot be transferred to a Windows Network Share

Challenge After launching a File Level Restore other os of a Linux server, and trying to copy a file to a Windows hosted share, the copy fails with "Access Denied". Cause Due to file permissions in Linux, the files cannot be copied to a Windows hosted share. A Linux SMB share will work with the...

LAN.FS Messenger v2.4 - Command Execution Vulnerability

Exploit for windows platform in category remote exploits LAN.FS Messenger v2.4 - Command Execution Vulnerability Introduction: ============= Lan.FS is a very quick, small and compact freeware networktool for non-commercial use only for Windows 2000/XP/2003/Vista & Windows 7. It is easy to handle...

Bugbear.B web backdoor

Your system seems to be infected by the Bugbear.B virus its backdoor has been detected on port 81. SPDX-FileCopyrightText: 2005 StrongHoldNet Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Xpand Rally 1.0.0.0 (Server/Clients) - Crash

/ by Luigi Auriemma / include include include ifdef WIN32 include / inserted winerr.h /str0ke / / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 1000...

Breed patch #1 - Zero-Length Remote Crash

/ by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupte...

Codename Eagle 1.42 - Socket Unreacheable Denial of Service

/ by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system...

Halo <= 1.05 Broadcast Client Crash Exploit

Exploit for unknown platform in category dos / poc =========================================== Halo include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid cha...

CVE-2004-0206

Network Dynamic Data Exchange NetDDE services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer,"...