WORK system 4.0.57 Remote File Includes Vulnerability

Exploit for php platform in category web applications Exploit Title: WORK system 4.0.57 Remote File Includes Vulnerability Google Dork: "Worksystem Version 4.0.57" Date: 22/12/2011 Author: Dr.5RaB Software Link http://sourceforge.net/projects/worksystem/files/latest/download: Version: 4.0.57 Test...

Windows 7 64 bit Memory Corruption Vulnerability

Windows 7 64 bit Memory Corruption Vulnerability A person known by the alias of "w3bd3vil " on twitter released an HTML snippet that will cause the 64 bit version of Windows 7 to blue screen if viewed under Safari. The underlying vulnerability is however not a flaw in Safari but rather a flaw in...

Researchers Warn of New Windows 7 Vulnerability

Researchers are warning about a new remotely exploitable vulnerability in 64-bit Windows 7 that can be used by an attacker to run arbitrary code on a vulnerable machine. The bug was first reported a couple of days ago by an independent researcher and confirmed by Secunia. In a message on Twitter,...

Free Mp3 Player 1.0 Local Denial of Service Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl Exploit Title: Free Mp3 Player 1.0 Local Denial of Service Date: 19-12-2011 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Free-Mp3-Player.shtml Version: 1.0 Tested on: Windows 7 my $file=...

Free Mp3 Player 1.0 - Local Denial of Service

Free Mp3 Player 1.0 - Local Denial of Service !/usr/bin/perl Exploit Title: Free Mp3 Player 1.0 Local Denial of Service Date: 19-12-2011 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Free-Mp3-Player.shtml Version: 1.0 Tested on: Windows 7 my $file= "Crash.mp3...

Free MP3 Player 1.0 Denial Of Service

!/usr/bin/perl Exploit Title: Free Mp3 Player 1.0 Local Denial of Service Date: 19-12-2011 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Free-Mp3-Player.shtml Version: 1.0 Tested on: Windows 7 my $file= "Crash.mp3"; my $junk= "\x41" x 2048; open$FILE,"$file";...

Free Mp3 Player 1.0 - Local Denial of Service

!/usr/bin/perl Exploit Title: Free Mp3 Player 1.0 Local Denial of Service Date: 19-12-2011 Author: JaMbA Download: http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/Free-Mp3-Player.shtml Version: 1.0 Tested on: Windows 7 my $file= "Crash.mp3"; my $junk= "\x41" x 2048; open$FILE,"$file";...

VideoPortalNeu SQL Injection

Exploit Title: VideoPortalNeu SQL Injection Vulnerability Date: 17/12/2011 Author: Lazmania61 | Bug Researchers Demo : http://www.scripte24shop.de/demo/videoportalneu/ Tested on: Windows 7 Greetz : HeRoTuRk ,Err0r , CeWahir , Bug Researchers Members...

Apple Safari - GdiDrawStream Blue Screen of Death

Exploit Title: GdiDrawStream BSoD Date: 18-12-2011 Author: webDEViL Version: Latest Tested on: Windows 7 x64 using Safari http://twitter.com/w3bd3vil ------ STACKTEXT: fffff88008b50f78 fffff8000328e3bf : 0000000000000050 fffff904c2730258 0000000000000001 fffff88008b510e0 : nt!KeBugCheckEx...

Apple Safari - GdiDrawStream Blue Screen of Death

Apple Safari - GdiDrawStream Blue Screen of Death Exploit Title: GdiDrawStream BSoD Date: 18-12-2011 Author: webDEViL Version: Latest Tested on: Windows 7 x64 using Safari http://twitter.com/w3bd3vil ------ STACKTEXT: fffff88008b50f78 fffff8000328e3bf : 0000000000000050 fffff904c2730258...

Social2 SQL Injection

Exploit Title: Social2 SQL Injection Vulnerability Date: 17/12/2011 Author: Lazmania61 Demo : http://www.scripte24shop.de/demo/social2 Tested on: Windows 7 Greetz : HeRoTuRk ,Err0r , CeWahir , Bug Researchers Members http://www.scripte24shop.de/demo/social2/user.php?userId=12...

FlirtPortal SQL Injection

Exploit Title: FlirtPortal SQL Injection Vulnerability Date: 17/12/2011 Author: Lazmania61 | Bug Researchers Demo : http://www.scripte24shop.de/demo/flirtportal Tested on: Windows 7 Greetz : HeRoTuRk ,Err0r , CeWahir , Bug Researchers Members...

Microsoft Windows CSRSS本地权限提升漏洞(MS11-097)

BUGTRAQ ID: 50972 CVE ID: CVE-2011-3408 csrss.exe系统进程是微软客户端、服务端运行时子系统，管理Windows图形相关任务。 Microsoft Windows CSRSS在实现上存在本地权限提升漏洞，成功利用后可允许本地攻击者以管理员权限执行任意代码。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 Microsoft Windows 7 厂商补丁： Microsoft...

Microsoft Windows Media Player和Media Center ".dvr-ms"远程代码执行漏洞(MS11-092)

BUGTRAQ ID: 50957 CVE ID: CVE-2011-3401 MediaPlayer是一个全功能的网络多媒体播放软件。Media Center是多媒体中心应用程序。 Microsoft Windows Media Player和Windows Media Center处理特制.dvr-ms文件的方式中存在远程代码执行漏洞，成功利用后可允许攻击者以当前用户权限执行任意代码 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 临时解决方法： 限制访问管理员组的ENCDEC.DLL...

CVE-2011-3401

ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability."...

CVE-2011-3408

Csrsrv.dll in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process...

Memory corruption

ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability."...

Privilege escalation

Csrsrv.dll in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2620712)

This host is missing an important security update according to Microsoft Bulletin MS11-097. OpenVAS Vulnerability Test $Id: secpodms11-097.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability 2620712 Authors: Rachana Shetty Copyright:...

PT-2011-4435 · Microsoft · Windows Xp +7

Name of the Vulnerable Software and Affected Versions: Active Directory versions prior to the fixed version Active Directory Application Mode ADAM versions prior to the fixed version Active Directory Lightweight Directory Service AD LDS versions prior to the fixed version Microsoft Windows XP...