CVE-2018-8440

CVE-2018-8440 is a Windows elevation-of-privilege flaw in ALPC handling, enabling local privilege escalation via the ALPC Task Scheduler interface. Public details in connected docs show exploit PoCs and proof-of-concept code exist (e.g., CANVAS and metasploit references) and that tested environme...

Faleemi Desktop Software 1.8.2 - 'SavePath for ScreenShots' Buffer Overflow (SEH)

Exploit Title: Faleemi Desktop Software 1.8.2 - 'SavePath for ScreenShots' Buffer Overflow SEH Author: Gionathan "John" Reale Discovey Date: 2018-09-13 Software Link: http://support.faleemi.com/fsc776/Faleemiv1.8.exe Tested Version: 1.8.2 Tested on OS: Windows 7 32bit Steps to Reproduce: Run the...

Free MP3 CD Ripper 2.6 - '.mp3' Buffer Overflow (SEH)

Exploit Title: Free MP3 CD Ripper 2.6 - '.mp3' Buffer Overflow SEH Author: Gionathan "John" Reale Discovey Date: 2018-09-13 Software Link: http://www.commentcamarche.net/download/telecharger-34082200-free-mp3-cd-ripper Tested on OS: Windows 7 32bit Tested Version: 2.6 Steps to Reproduce: Run the...

CVE-2018-8392

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,...

STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation (1)

STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation 1 / Exploit Title: STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation Date: 2018-09-13 Author: Parvez Anwar @parvezghh Vendor Homepage: https://www.stopzilla.com/ Software link:...

Faleemi Desktop Software 1.8.2 - SavePath for ScreenShots Buffer Overflow (SEH)

Faleemi Desktop Software 1.8.2 - SavePath for ScreenShots Buffer Overflow SEH Exploit Title: Faleemi Desktop Software 1.8.2 - 'SavePath for ScreenShots' Buffer Overflow SEH Author: Gionathan "John" Reale Discovey Date: 2018-09-13 Software Link: http://support.faleemi.com/fsc776/Faleemiv1.8.exe...

CVE-2018-8393

The connected advisory CPAI-2018-0959 confirms CVE-2018-8393: a remote code execution vulnerability in the Microsoft JET Database Engine (Jet) caused by a buffer overflow. An attacker could trigger it by convincing a user to open a specially crafted Excel file, enabling arbitrary code execution o...

CVE-2018-8392

CVE-2018-8392 is a heap-based buffer overflow in the Microsoft Jet Database Engine. The issue arises from improper handling of in-memory objects, enabling a remote, unauthenticated attacker to exploit by enticing a user to open a specially crafted Excel file, potentially leading to remote code ex...

CVE-2018-8332

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows...

CVE-2018-8424

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows...

CVE-2018-8420

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

CVE-2018-8420

CVE-2018-8420 is a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser that processes user input. Affected software includes Windows platforms listed in the description (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016, and others). The underlying ...

CVE-2018-8443

Technical details about CVE-2018-8443 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are described. Monitor for updates from official sources.

CVE-2018-8440

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC, aka “Windows ALPC Elevation of Privilege Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8....

CVE-2018-8440

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC, aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8....

Microsoft Windows: Enable Encrypted File System

The Encrypting File System EFS is a feature available in Windows which provides encryption in filesystem level. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Socusoft Photo to Video Converter 8.07 - 'Registration Name' Buffer Overflow

Exploit Title: Socusoft Photo to Video Converter 8.07 - 'Registration Name' Buffer Overflow Exploit Author : ZwX Exploit Date: 2018-09-13 Vendor Homepage : http://www.dvd-photo-slideshow.com/photo-to-video-converter.html Version Software : 8.07 Tested on OS: Windows 7 Related Exploit Link :...

Ettercap - A Comprehensive Suite For Man In The Middle Attacks

Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis. ETTERCAP...

PicaJet FX 2.6.5 - Denial of Service (PoC)

PicaJet FX 2.6.5 - Denial of Service PoC Exploit Title: PicaJet FX 2.6.5 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-09-11 Software Link: http://www.picajet.com/download/PicaJetFXInstall.exe Tested Version: 2.6.5 Tested on OS: Windows 7 32-bit Steps to Reproduce: Ru...

Microsoft .NET Framework RCE Vulnerability (KB4457035)

This host is missing a critical security update according to Microsoft KB4457035 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...