10443 matches found
CVE-2014-1824
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal aka .JNT file, aka "Windows Journal Remot...
MS14-041: Description of the security update for DirectShow: July 8, 2014
None None...
Microsoft Windows On-Screen Keyboard CVE-2014-2781 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary programs with elevated privileges. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing 6.0 Standard Avaya Aura...
MS14-041: Vulnerability in Microsoft DirectShow Could Allow Elevation of Privilege (2975681)
The remote Windows host is affected by a vulnerability in Microsoft DirectShow that could allow privilege escalation. Note that this issue can only be exploited if an attacker first successfully exploits another vulnerability in a low integrity process. C Tenable Network Security, Inc...
Microsoft Windows Ancillary Function Driver CVE-2014-1767 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...
Microsoft DirectX DirectShow CVE-2014-2780 Local Privilege Escalation Vulnerability
Description Microsoft DirectX DirectShow is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary code with elevated privileges in the context of the logged-in user. Failed exploit attempts may cause a denial-of-service condition...
Ubisoft Uplay 4.6 - Insecure File Permissions Local Privilege Escalation
No description provided by source. Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 4.6.3208 PC 4.5.2.3010 PC Summary: Uplay is a digital distribution, digital rights management,...
Ubisoft Uplay 4.6 - Insecure File Permissions Local Privilege Escalation
Uplay for PC suffers from an elevation of privileges vulnerability which can be used by a simple user that can change the executable file with a binary of choice. The vulnerability exist due to the improper permissions, with the 'F' flag Full for 'Everyone' group, making the entire directory...
Baidu Spark Browser v26.5.9999.3511 - Remote Stack Overflow Vulnerability (DoS)
Exploit for windows platform in category dos / poc !-- Baidu Spark Browser v26.5.9999.3511 Remote Stack Overflow Vulnerability DoS Vendor: Baidu, Inc. Product web page: http://www.baidu.com Affected version: 26.5.9999.3511 Summary: Spark Browser is a free Internet browser with very sharp UIs and...
百度浏览器海外版（Spark Browser） v26.5.9999.3511 - Remote Stack Overflow Vulnerability (DoS)
Vendor: Baidu, Inc. Product web page: http://www.baidu.com Affected version: 26.5.9999.3511 Summary: Spark Browser is a free Internet browser with very sharp UIs and cool utilities. It's based on the Chromium technology platform, giving it fast browsing capabilities. Desc: Spark Browser version...
Internet Bug Bounty: use-after-free vulnerability in Flash Player
It looks there is an use-after-free vulnerability in Adobe Flash Player when it's working with Internet Explorer. Following are the steps to reproduce the crash: 1. The OS is Windows 7 x64 with IE 11, Flash Player is the latest 14.0.0.125, all is fully updated. Please use the 64bit Windows since ...
Ubisoft Uplay 4.6 - Insecure File Permissions Privilege Escalation
Ubisoft Uplay 4.6 Insecure File Permissions Local Privilege Escalation Vendor: Ubisoft Entertainment S.A. Product web page: http://www.ubi.com Affected version: 4.6.3208 PC 4.5.2.3010 PC Summary: Uplay is a digital distribution, digital rights management, multiplayer and communications service...
CMS ContWEB SQL Injection
Sql Injection on CMS ContWEB - ATI + Date: 02/07/2014 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.ati.pi.gov.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: album.php + Dork : inurl:album.php?id= +...
Baidu Spark Browser 26.5.9999.3511 - Remote Stack Overflow (Denial of Service)
Bai...
Internet Explorer 8 - Fixed Col Span ID Full ASLR, DEP & EMET 4.1.X Bypass
No description provided by source. !-- Internet Explorer 8 Fixed Col Span ID full ASLR, DEP and EMET 4.1.X bypass Offensive Security Research Team http://www.offensive-security.com/vulndev/disarming-enhanced-mitigation-experience-toolkit-emet Affected Software: Internet Explorer 8 Vulnerability:...
Adobe Reader 11.0.0 Stack Overflow Crash PoC
No description provided by source. Title : Adobe Reader 11.0.0 Stack overflow Version : 11.0.0.379 Date : 2012-11-01 Vendor : http://www.adobe.com/ Impact : Med Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Windows 7 X64 ENG Author : coolkaveh Bug : ---- Don't forget that...
Free Mp3 Player 1.0 - Local Denial of Service Vulnerability
No description provided by source. !/usr/bin/perl Exploit Title: Free Mp3 Player 1.0 Local Denial of Service Date: 19-12-2011 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Free-Mp3-Player.shtml Version: 1.0 Tested on: Windows 7 my $file= Crash.mp3; my $junk=...
Microsoft Internet Explorer Option Element Use-After-Free
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Baby FTP Server 1.24 - Denial of Service
No description provided by source. !/usr/bin/perl Note from Exploit-DB thanks @wireghoul: This PoC only crashes the GUI for the application, not the server itself. Exploit Title: Baby FTP Server Version 1.24 Denial Of Service Date: 2013/6/25 Exploit Author: Chako Vendor Homepage:...
Typsoft FTP Server 1.10 Multiple Commands DoS
No description provided by source. !/usr/bin/perl Exploit Title: Typsoft FTP Server DoS CWD command Date: 02/06/2012 Author: Balazs Makany Software Link: http://sourceforge.net/projects/ftpserv/ Version: 1.10 Tested on: Windows 7 does not work on Windows XP Please note, that you need to have a...