CVE-2013-3862

Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager SCM, aka "Service Control Manager Double Free Vulnerability."...

CVE-2013-3866

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k...

CVE-2013-1341

CVE-2013-1341 affects the Windows kernel component win32k.sys (kernel-mode drivers) and allows local privilege escalation via a crafted application on several Windows families. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8. Root cause: ...

MS Windows Service Control Manager Privilege Elevation Vulnerability (2872339)

This host is missing an important security update according to Microsoft Bulletin MS13-077. OpenVAS Vulnerability Test $Id: secpodms13-077.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Windows Service Control Manager Privilege Elevation Vulnerability 2872339 Authors: Antu Sanadi Copyright: Copyright c...

Combite X-4 CMS SQL Injection

Exploit Title : Combite X-4 CMS SQL Injection Vulnerability Exploit Author : Ashiyane Digital Security Team Software Link : www.combite.com Tested on: Windows 7 , Linux Google Dork : intext:"Powered by Combite X-4 CMS" Date: 2013/09/11...

Ziteman CMS SQL Injection

Exploit Title : Ziteman CMS SQL Injection Vulnerability Exploit Author : Ashiyane Digital Security Team Software Link : http://www.ziteman.dk Tested on: Windows 7 , Linux Google Dork : intext:" Powered by Ziteman CMS" Date: 2013/09/11...

PT-2013-3096 · Microsoft · Windows Server 2003 +6

Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 versions SP2 and R2 SP1 Windows 7 version SP1 Windows 8 affected versions not specified Description: The issue allows local users to...

ICT Studio SQL Injection

Exploit title : ICT Studio Sql injection vulnerability + Software link : http://www.ictstudio.ie + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"Powered by ICT Studio" + Date: 2013/09/11...

Infoideias Cross Site Scripting / SQL Injection

Exploit Title : Infoideias Multiple Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://www.infoideias.com.br Tested on: Windows 7 , Linux Google Dork : intext:"Powered by Infoideias" Date: 2013/09/10...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-1344 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

CIS Manager SQL Injection

Exploit Title : CIS Manager SQL Injection Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://www.construtiva.com.br Tested on: Windows 7 , Linux Google Dork : intext:"Powered by CIS Manager" Date: 2013/09/10...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3865 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

MS13-079: Vulnerability in Active Directory could allow denial of service: September 10, 2013

None None...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3864 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-3866 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Winfakt Cross Site Scripting / SQL Injection

Exploit Title : winfakt Sql injection / Cross site scripting Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://www.winfakt.be Tested on: Windows 7 , Linux Google Dork : intext:"Powered by WinFakt! webwinkel" Date: 2013/09/10...

Microsoft Windows Service Control Manager CVE-2013-3862 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that exists in the Windows Service Control Manager SCM. An attacker can exploit this issue to execute arbitrary code with escalated privileges. Successfully exploiting this issue can lead to the complete compromi...

Interalp Touristik SQL Injection

Exploit Title : Interalp Touristik Sql injection Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://interalp-touristik.com Tested on: Windows 7 , Linux Google Dork : intext:"powered by Interalp Touristik" Date: 2013/09/10...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-1342 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of the affected...

Microsoft Internet Explorer - CAnchorElement Use-After-Free (MS13-055) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "MS13-055 Microsof...