4937 matches found
. net the latest mention of the right to 0day, the pass to kill the windows-vulnerability warning-the black bar safety net
ps: this can be once compiled successfully, without modification....... From: http://www.exploit-db.com/exploits/16940/ exploit-db comparison and kind, and is not compiled on the difficult side dish....... / Exploit Title: . NET Runtime Optimization Service Privilege Escalation Date: 03-07-2011...
IGSS 8 ODBC Server Multiple Remote Uninitialized Pointer Free DoS
Exploit for windows platform in category dos / poc !/usr/bin/python igss.py IGSS 8 ODBC Server Multiple Remote Uninitialized Pointer Free DoS Jeremy Brown / jbrown at patchtuesday dot org Mar 2011 There are multiple remote uninitialized pointer free conditions in IGSS's ODBC server. By sending a...
JDK unspecified vulnerability in Install component
Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, when using Java Update, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install...
PT-2011-2079 · Microsoft · Windows Server 2003 +5
Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista versions SP1 and SP2 Windows Server 2008 versions Gold, SP2, and R2 Windows 7 affected versions not specified Description: The issue arises from improper validation...
CVE-2011-0096
The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote...
Design/Logic Flaw
awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC share pathname...
IBM Tivoli Storage Manager FastBack Mount Service Code Execution
Added: 10/18/2010 CVE: CVE-2010-3058 BID: 42549 OSVDB: 67292 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. TSM includes FastBack, which provides a client/server backup solution for the MS Windows environment. FastBack...
PT-2010-4261 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A remote code execution issue exists in the way the Windows common control library renders specially crafted Web sites when using a third-party scalable vector graphics SVG...
VulnCheck KEV: CVE-2010-3888
Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers...
MS10-061: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290) (EMERALDTHREAD) (uncredentialed check)
The version of the Print Spooler service on the remote Windows host is affected by a service impersonation vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code on a Windows XP system to escalate privileges on all other supported Windows systems. EMERALDTHREAD is...
PT-2010-4254 · Microsoft · Office +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 Microsoft Office versions XP SP3, 2003 SP3, and 2007 SP2 Description: A remote code execution issue exists due to the incorrect parsin...
Microsoft Windows SMB Registry : OS Version and Processor Architecture
Nessus was able to determine the processor architecture, build lab strings, and the Windows OS version installed on the remote system by connecting to the remote registry with the supplied credentials. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid48942;...
Autodesk AutoCAD 2007 dll Hijacking exploit (color.dll)
No description provided by source. / Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll color.dll...
Autodesk AutoCAD 2007 DLL Hijacking Exploit
/ Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll color.dll Hijacking exploit Author: xsploited...
Autodesk AutoCAD 2007 - color.dll DLL Hijacking
Autodesk AutoCAD 2007 - color.dll DLL Hijacking / Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll...
Autodesk AutoCAD 2007 - 'color.dll' DLL Hijacking
/ Description: A vulnerability exists in windows that allows other applications dynamic link libraries to execute malicious code without the users consent, in the privelage context of the targeted application. Title: Autocad 2007 Professional dll color.dll Hijacking exploit Author: xsploited...
Demo of the Microsoft DLL Hijacking Exploit
In this video, the folks at Offensive Security demonstrated exactly how the Windows DLL-hijacking vulnerability can exploited using Metasploit and a benign PowerPoint slide...
HD Moore: Critical Flaw in 40 Different Windows Apps
Metasploit’s HD Moore was in the midst of researching the recently patched LNK Windows shortcut vulnerability when he stumbled upon a serious problem that exposes more than 40 different Windows software programs to remote code execution attacks. Moore issued a brief warning about the issue via...
Microsoft Windows denial of service (DoS) vulnerability
Overview Microsoft Windows contains a denial of service DoS vulnerability. Microsoft Windows contains a denial of service DoS vulnerability caused by IPv6 packets with malformed extension headers. Darren Willis of Fourteenforty Research Institute Inc. reported this vulnerability to IPA. JPCERT/CC...
PT-2010-3516 · Microsoft · Windows +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to an integer overflow in the TCP/IP stack, allowing local users to gain privileges. It is also described as an elevation of privilege vulnerability in...