Microsoft DirectX QuickTime媒体文件解析代码执行漏洞

BUGTRAQ ID: 35139 CVECAN ID: CVE-2009-1537 Microsoft DirectX是Windows操作系统中的一项功能，流媒体在玩游戏或观看视频时通过这个功能支持图形和声音。 DirectX的DirectShow组件（quartz.dll）在解析畸形的QuickTime媒体文件时存在错误，用户受骗打开了恶意的媒体文件就会导致执行任意代码。由于用户可能在浏览器中安装媒体播放插件，因此访问恶意网页就足以导致播放QuickTime文件，触发Quartz.dll中的漏洞。 Microsoft DirectX 9.0 Microsoft DirectX 8.1...

Drupal Local File Inclusion

Hi guys, I was testing Acunetix WVS with AcuSensor enabled on Drupal http://www.drupal.org and the scanner found a possible File Inclusion vulnerability. The vulnerability is located in the file "includes\theme.inc" on line 1011. Vulnerable code: function themerendertemplate$templatefile,...

SuSE Update for Xorg and XFree SUSE-SA:2008:003

Check for the Version of Xorg and XFree OpenVAS Vulnerability Test $Id: gbsuse2008003.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for Xorg and XFree SUSE-SA:2008:003 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...

With GetHashes software get Windows System Hash password value-the value of vulnerability and early warning-the black bar safety net

For an intruder, get the Windows password is the entire attack process is crucial to a ring, have the system the original user password, will enable the network to penetrate and keep control more easily. Windows System Hash password values with LM-HASH and a NTLM-HASH value of the two parts, once...

smb-enum-users NSE Script

Attempts to enumerate the users on a remote Windows system, with as much information as possible, through two different techniques both over MSRPC, which uses port 445 or 139; see smb.lua. The goal of this script is to discover all user accounts that exist on a remote system. This can be helpful...

BitTorrent 6.0.3 .torrent File Stack Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================ BitTorrent 6.0.3 .torrent File Stack Buffer Overflow Exploit ============================================================ !/usr/bin/perl BitTorrent 6.0.3 .torrent File Stack Buffer...

Sticky keys to create the invasion of the Vista system burst cool Backdoor-vulnerability warning-the black bar safety net

Source: the sun What is sticky keys? When you are in a Windows operating system inside the continuous press 5 times Shift key and after that you see out what? In windows 2 0 0 0/xp/Vista, press shift key 5 times, you can open the sticky position, 会运行sethc.exe and, in the login interface may also ...

Total Video Player 1.03 - .m3u File Local Buffer Overflow

Total Video Player 1.03 - .m3u File Local Buffer Overflow /0day Total Video Player V1.03 .m3u file Local Buffer Overflow In this exploit you chose to bind a port or to spawn calc.exe. After I crafted a playlist I observed that the stack got corrupted. The corruption accured in some points,and...

Invensys Wonderware InTouch creates insecure NetDDE share

Overview Invensys Wonderware InTouch 8.0 creates a NetDDE share that could allow an attacker to run arbitrary programs. Description Invensys Wonderware InTouch HMI Software is used in Supervisory Control And Data Acquisition SCADA systems.Dynamic Data Exchange DDE was designed to allow Microsoft...

Advanced malware technology new challenges--break active Defense-vulnerability warning-the black bar safety net

Article author: xyzreg Author website: http://www.xyzreg.net Information source: evil octal information security team forum.eviloctal.com） This is the year I'm in XCON2007 security focus information security technology summit the speech of the subjects, now offers ppt download Address: Topic...

The history of the most simple Windows System Password rescue-vulnerability warning-the black bar safety net

Forgot Windows login password? On the Internet about solution are numerous, but after trying you will find that many methods are simply not effective, and some may even cause the system to collapse completely. By the author in Windows 2 0 0 0 and Windows XP in the repeated research and testing,...

Diskeeper 9 - Remote Memory Disclosure

Diskeeper 9 - Remote Memory Disclosure / Diskeeper Remote Memory Disclosure Credit: Pravus pravus -a-t- hush -d-o-t- com Greetz: Scientology for making a remotely accessible disk defragmenter. Felix, Jenna, and Isaac. Vulnerability Description: This vulnerability involves a memory comparison...

No need to attack the lsass process to decrypt the system administrator password-vulnerability warning-the black bar safety net

Lsass. exe is a Windows system is an essential process belonging to the Microsoft Windows System in the security mechanisms of relevant processes. lsass. exe process is mainly used for local security and login policies, and also management of IP-related security information. The lsass. exe proces...

Modifications introduced into the table to create penetration KIS6 download-vulnerability warning-the black bar safety net

Article author: gyzy E. S. T it www.gyzy.org） Information source: evil octal information security team www.eviloctal.com） This article has been published in the hacker line of Defense of the 2 0 0 7 year 2 monthly. The author and the hacker line of Defense on the retention of copyright, reproduce...

Teach you simple methods to easily crack the super bodyguard of password-vulnerability warning-the black bar safety net

Super bouncer from the market since it is by the majority of computer enthusiasts of welcome, which the disk protection function is amazing, there is one sentence say is“it has Cons”, so powerful function must also have the Cons side. If you forget your super bodyguard system administrator...

Retrieve Windows Vista username and password-vulnerability warning-the black bar safety net

In Windows vista local administrator password of the hack in an article, we have introduced how to use the Elcom Soft of Proactive Password Auditor PPA to retrieve the lost or forgotten Windows Vista local administrator password, however, in relative terms, the PPA of the crack requires the user ...

Compromised Windows System (hosts File Check)

The remote Windows host uses the file 'System32\drivers\etc\hosts' to fix the name resolution of some sites to localhost or internal systems. Some viruses or spyware modify this file to prevent antivirus software or other security software from obtaining updates. Nessus has found one or more...

On the Windows System to achieve the DDOS attack-vulnerability warning-the black bar safety net

First said we used to attack the client and server method of configuration, using the moment the most famous of REDHAT LINUX for testing, the present attack test I'm using FEDORA CORE3, the software is the most famousDDOSattack tool TFN2K LINUX Edition, is to attack the WINDOWS Server system is...

Command line install of SERV-U-vulnerability warning-the black bar safety net

Serv-U, A in the windows System use a very wide range offtp server, which is a pity, it is not a remote installation feature it's okay, hand the remote to install it, it is fun ^^ Serv-U the latest version as far as I know, is 4. 0. Note, be sure to use the latest version. The original version of...

Microsoft“blocked”online update our“hack”to have surgery-vulnerability warning-the black bar safety net

The Microsoft Windows System vulnerability frequently, in order for the majority of users“responsible for”, Microsoft provide website, online patch update. Who want to make their computer more secure some? Thus are pleased to accept this“free lunch.” But recently found that the update is...