Microsoft Windows Media Player DVR-MS File Code Execution

Added: 03/14/2011 CVE: CVE-2011-0042 BID: 46680 OSVDB: 71016 Background Windows Media Player is an audio and video media player for Windows platforms. Problem A file parsing error in Windows Media Player allows command execution when a user opens a specially crafted Digital Video Recording DVR-MS...

vTiger CRM 5.0.4 - Local File Inclusion

!/usr/bin/python INFORMATION: Exploit Title: Vtiger CRM 5.0.4 Pre-Auth Local File Inclusion Exploit Google Dork: "The honest Open Source CRM" "vtiger CRM 5.0.4" Date: 5/3/2011 CVE: CVE-2009-3249 Windows link: http://bit.ly/fiOYCL Linux link: http://bit.ly/hluzLf Tested on: Windows XP/Linux Ubuntu...

Design/Logic Flaw

Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System CIFS browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1...

GlobalSCAPE CuteZIP Stack Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in version 2.1 of CuteZIP. In order for the command to be executed, an attacker must convince the target user to open a specially crafted zip file with CuteZIP. By doing so, an attacker can execute arbitrary code as the target user...

Windows OS Version Information

Binary data 6681.prm...

Microsoft XML Core Services Remote Code Execution Vulnerability (936227)

This host is missing a critical security update according to Microsoft Bulletin MS07-042. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-3970

Stack-based buffer overflow in the CreateSizedDIBSECTION function in shimgvw.dll in the Windows Shell graphics processor aka graphics rendering engine in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary...

CVE-2010-3961

The Consent User Interface UI in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle an unspecified registry-key value, which allows local users with SeImpersonatePrivilege rights to gain privileges via a crafted application, aka...

MediaMonkey DLL Hijacking Exploit

Exploit for windows platform in category local exploits ================================= MediaMonkey DLL Hijacking Exploit ================================= || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

The GodFather v 0.80 DLL Hijacking Exploit

Exploit for windows platform in category local exploits ========================================== The GodFather v 0.80 DLL Hijacking Exploit ========================================== || || | || o,7 || . o7 || 4||| ow, : / /...

Fox Audio Player 0.8.0 .m3u Denial of Service

Exploit for windows platform in category dos / poc ============================================= Fox Audio Player 0.8.0 .m3u Denial of Service ============================================= Title: Fox Audio Player 0.8.0 .m3u Denial of Service Vulnerability Author: 4n0nym0us Arash Sa'adatfar...

[security bulletin] HPSBMA02516 SSRT090232 rev.1 - HP Data Protector Express and HP Data Protector Express Single Server Edition (SSE), Local

Denial of Service DoS, Execution of Arbitrary Code -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02067559 Version: 1 HPSBMA02516 SSRT090232 rev.1 - HP Data Protector Express and HP Data Protector Express Single Server Edition SSE, Local Deni...

Microsoft Windows SMB Registry : OS Version and Processor Architecture

Nessus was able to determine the processor architecture, build lab strings, and the Windows OS version installed on the remote system by connecting to the remote registry with the supplied credentials. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid48942;...

CVE-2010-1795

Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory...

123 Flashchat version 7.8 Multiple Remote Vulnerabilities

Exploit for windows platform in category remote exploits ========================================================= 123 Flashchat version 7.8 Multiple Remote Vulnerabilities ========================================================= |-----------------------------------------------------------------...

CVE-2010-2552

Stack consumption vulnerability in the SMB Server in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to cause a denial of service system hang via a malformed SMBv2 compounded request, aka "SMB Stack Exhaustion Vulnerability."...

VUPEN Security Research - Microsoft Internet Explorer Table Element Use-after-free Vulnerability (CVE-2010-2560)

VUPEN Security Research - Microsoft Internet Explorer Table Element Use-after-free Vulnerability CVE-2010-2560 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Internet Explorer is a web browser developed by Microsoft and included as part of the Microsoft...

Nginx <=0.7.65/0.8.39 source code download vulnerability-vulnerability warning-the black bar safety net

Nginx is a network Protocol and reverse proxy server, also is one by Igor Sysoev prepared by the receiving Agent server it is already in the include RamblerMedia. com, including many influential Russian website has used more than 5 years. According to the survey Netcraft nginx in 2 0 1 0 in April...

IBM Cognos Express Server Backdoor Account Remote Code Execution

Added: 05/25/2010 CVE: CVE-2010-0557 BID: 38084 OSVDB: 62118 Background IBM Cognos Express is an integrated business intelligence BI and planning solution which delivers the essential reporting, analysis, dashboard, scorecard, planning, budgeting and forecasting capabilities that midsize companie...

Archive Searcher 2.1 SEH Overwrite

!/usr/bin/ruby Software : Archive Searcher 2.1 Author : Lincoln OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Script provided 'as is', without any warranty. Use for educational...