Design/Logic Flaw

Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character...

Out-of-band release for Security Bulletin MS14-068

On Tuesday, November 18, 2014, at approximately 10 a.m. PST, we will release an out-of-band security update to address a vulnerability in Windows. We strongly encourage customers to apply this update as soon as possible, following the directions in the security bulletin. More information about th...

MS14-064 Microsoft Windows OLE Package Manager Code Execution Exploit

This module exploits a vulnerability found in Windows Object Linking and Embedding OLE allowing arbitrary code execution, bypassing the patch MS14-060, for the vulnerability publicly known as "Sandworm", on systems with Python for Windows installed. Windows Vista SP2 all the way to Windows 8,...

CVE-2014-8359

Untrusted search path vulnerability in Huawei Mobile Partner for Windows 23.009.05.03.1014 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll in the Mobile Partner directory...

Dyreza Banker Trojan Attackers Exploiting CVE-2014-4114 Windows Flaw

The Dyreza Trojan is nothing if not ambitious. The malware has been spotted doing a variety of interesting things in the last year, including bypassing SSL and targeting users of specific business apps. Now the Trojan is exploiting the recently disclosed CVE-2014-4114 vulnerability in Windows tha...

VulnCheck KEV: CVE-2014-6352

Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object...

VulnCheck KEV: CVE-2014-4114

A vulnerability exists in Windows Object Linking & Embedding OLE that could allow remote code execution if a user opens a file that contains a specially crafted OLE object...

Novell NetMail <= 3.52d IMAP STATUS Buffer Overflow

No description provided by source. $Id: novellnetmailstatus.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

Yahoo! Messenger 5.0 Call Center Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4837/info Yahoo! Messenger configures the 'ymsgr:' URI handler when it is installed. The handler invokes YPAGER.EXE with the supplied parameters. YPAGER.EXE accepts the 'call' argument; it is used for starting the 'Call...

Phusion Webserver 1.0 Long URL Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4119/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. Phusion Webserver does not perform sufficient bounds checking of externally supplied data. As a result, ...

openSUSE Security Update : mozilla-xulrunner191 (mozilla-xulrunner191-3141)

Mozilla XULRunner 1.9.1 was updated to version 1.9.1.13, fixing various bugs and security issues. Following security issues were fixed: MFSA 2010-49 / CVE-2010-3169: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based...

CVE-2014-1817

CVE-2014-1817 concerns a vulnerability in usp10.dll (Uniscribe) that affects multiple Windows versions (Server 2003 SP2, Vista, Server 2008/2008 R2, Windows 7/8/8.1, Server 2012/R2) and related Office components. The issue arises from processing a crafted EMF+ record in a font file, enabling remo...

SHOUTcast DNAS 2.2.1 - Persistent Cross-Site Scripting

SHOUTcast DNAS 2.2.1 - Persistent Cross-Site Scripting Exploit Title: SHOUTcast DNAS v2.2.1 win32 XSS\HTML Injection in Song history other version may be also affected Date: 2014-06-11 Exploit Author: robercik101 Vendor Homepage: http://www.shoutcast.com/ ?t=373139 Software...

VulnCheck KEV: CVE-2014-1807

The ShellExecute API in Windows Shell in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly implement file associations, which allows...

EUVD-2014-0355

The Security Account Manager Remote SAMR protocol implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2 does not properly determine the user-lockout state, which makes it easier for...

SolidWorks Workgroup PDM 2014 - 'pdmwService.exe' Arbitrary File Write (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write', 'Description' = %q This module exploits a remote arbitrary file...

Design/Logic Flaw

Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization RHEV 3 and 3.2 allows local users to gain privileges via a crafted application in an unspecified folder...

MS14-003: Vulnerability in Windows kernel-mode drivers could allow elevation of privilege: January 14, 2014

Resolves a vulnerability in Windows that could allow elevation of privilege if a user logs on to the system and runs a specially crafted application. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.INTRODUCTIONMicrosoft has released securi...

CVE-2013-6182

EMC Replication Manager prior to version 5.5 is affected by an unquoted file-path vulnerability that allows local privilege escalation via crafted scripts that reside in a parent directory of a target path. The root cause is unquoted elements in file paths used by user-created scripts, enabling a...

PT-2013-1328

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to the WinVerifyTrust function in Windows, which is associated with the improper verification of PE file digests during Authenticode signature checking. This can allow a...