Microsoft Office ClickOnce Unsafe Execution

Added: 01/16/2012 CVE: CVE-2012-0013 BID: 51284 OSVDB: 78207 Background ClickOnce is a deployment technology that allows developers to create self-updating Windows-based applications that can be installed and run with minimal user interaction. A ClickOnce application is any Windows Presentation...

Microsoft Windows - Assembly Execution (MS12-005)

Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability Date: 1/14/2012 Author: Byoungyoung Lee, http://exploitshop.wordpress.com Version: Windows 7 32bit, fully patched until Jan 2012 Tested on: Windows 7 32bit CVE : CVE-2012-0013 PoC:...

Microsoft Windows Kernel 'win32k.sys' Memory Corruption Vulnerability

Microsoft Windows 7 Professional 64-bit is prone to memory corruption vulnerability. This NVT has been replaced by NVT secpodms12-008.nasl OID:1.3.6.1.4.1.25623.1.0.902810. OpenVAS Vulnerability Test $Id: gbmswinkernelwin32ksysmemcorruptionvuln.nasl 5342 2017-02-18 17:02:54Z cfi $ Microsoft Windo...

HTC HD2 TCOM Win 6.5 modify to HTC HD2 Win7 10 Steps

Document Title: =============== HTC HD2 TCOM Win 6.5 modify to HTC HD2 Win7 10 Steps Release Date: ============= 2012-01-13 Vulnerability Laboratory ID VL-ID: ==================================== 381 Discovery Status: ================= Published Exploitation Technique: =======================...

HTC HD2 TCOM Win 6.5 modify to HTC HD2 Win7 10 Steps

Document Title: =============== HTC HD2 TCOM Win 6.5 modify to HTC HD2 Win7 10 Steps Release Date: ============= 2012-01-13 Vulnerability Laboratory ID VL-ID: ==================================== 381 Discovery Status: ================= Published Exploitation Technique: =======================...

Contus Job Portal SQL Injection

Exploit Title: Contus Job Portal Injection Vulnerability Date: 07/01/2012 Author: Lazmania61 | Bug Researchers Demo : http://www.contusjobportal.net/demo/ Tested on: Windows 7 http://www.contusjobportal.net/demo/jobresult?searchname=quickjobsearch&Keywords=&Location=&Category=16...

YABSoft Advanced Image Hosting Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AIHS Advanced Image Hosting Script SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://yabsoft.com/ Tested on: Linux/Windows 7 Vulnerable File: viewcomments.php Vulnerable...

Advanced Image Hosting Script - SQL Injection

Advanced Image Hosting Script - SQL Injection Exploit Title: AIHS Advanced Image Hosting Script SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://yabsoft.com/ Tested on: Linux/Windows 7 Vulnerable File: viewcomments.php Vulnerable parameter:...

Joomla Contushdvideoshare SQL Injection

Exploit Title: comcontushdvideoshare SQL Injection Vulnerability Date: 07/01/2012 Author: Lazmania61 | Bug Researchers Demo : www.hdvideoshare.net/demo/ Tested on: Windows 7 www.hdvideoshare.net/demo/index.php?option=comcontushdvideoshare&view=player&id=14...

Advanced Image Hosting Script - SQL Injection

Exploit Title: AIHS Advanced Image Hosting Script SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://yabsoft.com/ Tested on: Linux/Windows 7 Vulnerable File: viewcomments.php Vulnerable parameter: viewcomments.php?gal=gallery id PoC:...

Microsoft Windows SSL/TLS Information Disclosure Vulnerability (2643584)

This host is missing an important security update according to Microsoft Bulletin MS12-006. OpenVAS Vulnerability Test $Id: secpodms12-006.nasl 8276 2018-01-03 12:29:18Z asteins $ Microsoft Windows SSL/TLS Information Disclosure Vulnerability 2643584 Authors: Antu Sanadi Copyright c 2012 SecPod,...

Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities (2636391)

This host is missing a critical security update according to Microsoft Bulletin MS12-004. OpenVAS Vulnerability Test $Id: secpodms12-004.nasl 5341 2017-02-18 16:59:12Z cfi $ Microsoft Windows Media Could Allow Remote Code Execution Vulnerabilities 2636391 Authors: Sooraj KS Copyright: Copyright c...

Windows ClickOnce Application Installer Remote Code Execution Vulnerability (2584146)

This host is missing an important security update according to Microsoft Bulletin MS12-005. OpenVAS Vulnerability Test $Id: secpodms12-005.nasl 5341 2017-02-18 16:59:12Z cfi $ Windows ClickOnce Application Installer Remote Code Execution Vulnerability 2584146 Authors: Rachana Shetty Copyright:...

Remote code execution

Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted media file, related to Quartz.dll...

Immunity Canvas: MS12_005

Name| ms12005 ---|--- CVE| CVE-2012-0013 Exploit Pack| CANVAS Description| MS12-005: MS Office 2007-2010 Shell Object Packager file extension bypass Notes| Repeatability: Infinite Notes: The issue we exploit here was fixed silently alongside the ClickOnce issues in the MS12-005 patch but allows f...

Microsoft Windows ClickOnce Application Installer Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a malformed file. Successful exploits can allow attackers to execute arbitrary code within the privileges of the user running the...

Blade API Monitor 3.6.9.2 Unicode Stack Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: Blade API Monitor Unicode Stack Buffer Overflow the serial number!! Date: 25/12/2011 Author: FullMetalFouad Version: 3.6.9.2 Tested on: Windows XP/7 my $file= "bofblade.txt"; windows/Winexec - 178 bytes VERBOSE=false,...

PT-2012-2230 · Microsoft · Qdvd.Dll +7

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...

Microsoft Windows Kernel CVE-2012-0001 SafeSEH Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass the SafeSEH security mechanism. This may allow the attacker to execute arbitrary code by leveraging memory corruption vulnerabilities in Windows applications. Technologies...

Blade API Monitor 3.6.9.2 - Unicode Stack Buffer Overflow

Blade API Monitor 3.6.9.2 - Unicode Stack Buffer Overflow Exploit Title: Blade API Monitor Unicode Stack Buffer Overflow the serial number!! Date: 25/12/2011 Author: FullMetalFouad Version: 3.6.9.2 Tested on: Windows XP/7 my $file= "bofblade.txt"; windows/Winexec - 178 bytes VERBOSE=false,...