MS13-009 Microsoft Internet Explorer COALineDashStyleArray Integer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

MS13-009 Microsoft Internet Explorer COALineDashStyleArray Integer Overflow

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "8.0", :uamaxver = "8.0", :javascript = true, :osname = OperatingSystems::WINDOWS, :rank = Rank def initializeinfo= superupdateinfoinfo, 'Name' = "MS13-009 Microsoft Internet...

Microsoft Internet Explorer - COALineDashStyleArray Integer Overflow (MS13-009) (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Microsoft Update to Improve Cryptography and Digital Certificate Handling (2854544)

This host is missing an important security update according to Microsoft Security Advisory 2854544. OpenVAS Vulnerability Test $Id: secpodcryptndigitalcerthandlingupdate.nasl 5347 2017-02-19 09:15:55Z cfi $ Microsoft Update to Improve Cryptography and Digital Certificate Handling 2854544 Authors:...

Microsoft Update to Improve Cryptography and Digital Certificate Handling (2854544)

This host is missing an important security update according to Microsoft Security Advisory 2854544. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Java - Web Start Double Quote Injection Remote Code Execution (Metasploit)

Java - Web Start Double Quote Injection Remote Code Execution Metasploit ======================================================== Java Web Start Double Quote Inject Remote Code Execution ======================================================== Date: Jun 12 2012 updated: Jun 6 2013 Author: Rh0...

Java - Web Start Double Quote Injection Remote Code Execution (Metasploit)

======================================================== Java Web Start Double Quote Inject Remote Code Execution ======================================================== Date: Jun 12 2012 updated: Jun 6 2013 Author: Rh0 Version: At least Java 1.6.31 to 1.6.35 and 1.7.03 to 1.7.07 Tested on:...

Sun Java Web Start Double Quote Injection

======================================================== Java Web Start Double Quote Inject Remote Code Execution ======================================================== Date: Jun 12 2012 updated: Jun 6 2013 Author: Rh0 Version: At least Java 1.6.31 to 1.6.35 and 1.7.03 to 1.7.07 Tested on:...

JVN#63901692: Internet Explorer vulnerable to information disclosure

Internet Explorer contains an issue in handling XML files, which may result in information disclosure. Impact If a user opens a specially crafted XML file as a local file, other local files may be disclosed. Solution Upgrade the software Users of Windows 7 and later, Windows Server 2008 R2 and...

Ruubikcms 1.1.1 - Persistent Cross-Site Scripting

Exploit Title: ruubikcms v1.1.1 Stored XSS Google Dork: powered by ruubikcms Date: 2013-6-5 Exploit Author: expl0i13r Vendor Homepage: http://www.ruubikcms.com/ Software Link: http://www.ruubikcms.com/ruubikcms/download.php?f=ruubikcms111.zip Version: 1.1.1 Tested on: Windows 7 Contact:...

Ruubikcms 1.1.1 - Persistent Cross-Site Scripting

Ruubikcms 1.1.1 - Persistent Cross-Site Scripting Exploit Title: ruubikcms v1.1.1 Stored XSS Google Dork: powered by ruubikcms Date: 2013-6-5 Exploit Author: expl0i13r Vendor Homepage: http://www.ruubikcms.com/ Software Link: http://www.ruubikcms.com/ruubikcms/download.php?f=ruubikcms111.zip...

Ruubikcms 1.1.1 - tinybrowser.php?folder Directory Traversal

Ruubikcms 1.1.1 - tinybrowser.php?folder Directory Traversal Exploit Title: ruubikcms v1.1.1 Path Traversal vulnerability Google Dork: powered by ruubikcms Date: 2013-6-5 Exploit Author: expl0i13r Vendor Homepage: http://www.ruubikcms.com/ Software Link:...

PEStudio 3.69 - Denial of Service

Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on: Windows XP SP2 / Windows 7 Vendor Patch : Recently release...

PEStudio 3.69 - Denial of Service

PEStudio 3.69 - Denial of Service Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on: Windows XP SP2 / Windows...

PEStudio 3.69 Denial Of Service

Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on: Windows XP SP2 / Windows 7 Vendor Patch : Recently release...

Internet Explorer VML Dashstyle Attributes Integer Overflow

Added: 06/03/2013 CVE: CVE-2013-2551 BID: 58570 OSVDB: 91197 Background Vector Markup Language VML is an XML-based format for vector graphics. Problem An integer overflow vulnerability in vml.dll when processing dashstyle attributes of certain VML elements in a web page allows arbitrary command...

Novell Client for Windows 'nicm.sys' 本地权限提升漏洞

BUGTRAQ ID: 60203 Novell Client 工作站软件通过提供对 NetWare 和 Open Enterprise Server OES 的访问，扩展了 Linux 和 Windows 台式机的功能。 Novell Client 2 SP3 for Windows 7/8在处理NICM.SYS内的"NICMIOCTLREQUESTREPLY" 0x143B6B IOCTL请求时存在错误，可导致以内核权限执行任意代码。 0 Novell Client for Windows NT/2000/XP 4.x 厂商补丁： Novell ------...

IBM SPSS SamplePower C1Tab ActiveX Heap Overflow Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

AdobeCollabSync Buffer Overflow Adobe Reader X Sandbox Bypass

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

IBM SPSS SamplePower C1Tab ActiveX Heap Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...