Microsoft Windows Media Remote Code Execution Vulnerability (2648048)

This host is missing a critical security update according to Microsoft Bulletin MS11-092. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-2019

Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains an HTML file, aka...

Microsoft Windows Time Component Remote Code Execution Vulnerability (2618451)

This host is missing a critical security update according to Microsoft Bulletin MS11-090. OpenVAS Vulnerability Test $Id: secpodms11-090.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft Windows Time Component Remote Code Execution Vulnerability 2618451 Authors: Sooraj KS Copyright: Copyright c...

CVE-2011-3401

ENCDEC.DLL in Windows Media Player and Media Center in Microsoft Windows XP SP2 and SP3, Windows Vista SP2, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted .dvr-ms file, aka "Windows Media Player DVR-MS Memory Corruption Vulnerability."...

CVE-2011-3401

This CVE affects Microsoft Windows Media Player and Windows Media Center (XP SP2/SP3, Vista SP2, Windows 7 SP1). The root cause is memory corruption when parsing specially crafted DVR-MS files, allowing remote code execution with the caller’s privileges. Affected components include ENCDEC.DLL use...

CVE-2011-2018

CVE-2011-2018 affects multiple Windows OS kernels (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2, Windows 7 SP0/SP1). Root cause: the Windows kernel fails to initialize objects properly, enabling a local attacker to gain SYSTEM privileges via a crafted application (Windows Kernel Except...

Windows Kernel-Mode Drivers Remote Code Execution Vulnerabilities (2567053)

This host is missing a critical security update according to Microsoft Bulletin MS11-087. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows CSRSS CVE-2011-3408 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker may exploit this issue to execute arbitrary code with administrator privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Avaya Aura...

Microsoft Windows Kernel Invalid Trap-Frame CVE-2011-2018 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...

PT-2011-4436 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...

Microsoft Windows Active Directory Remote Code Execution Vulnerability (2640045)

This host is missing a critical security update according to Microsoft Bulletin MS11-095 SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Reports Emerge of New Flash Vulnerabilities

There are multiple reports emerging of two new vulnerabilities in Adobe Flash that could lead to remote code execution. There’s little information about the exact nature of the bugs available right now, and Adobe has not released any advisories or information about them either. The vulnerabilitie...

CyberLink (Multiple Products) - File Project Handling Stack Buffer Overflow (PoC)

CyberLink Multiple Products - File Project Handling Stack Buffer Overflow PoC !/usr/bin/python Exploit Title: CyberLink Multiple Products File Project Handling Stack Buffer Overflow POC by: modpr0beatspenteradotcom @modpr0be Platform: Windows Tested on: Windows XP SP3, Windows 7 SP1 with: CyberLi...

Code injection

Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wpiesandboxescape module for Immunity CANVAS. NOTE: as of 20111207, th...

CVE-2011-4695

Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wpiesandboxescape module for Immunity CANVAS. NOTE: as of 20111207, th...

CVE-2011-4695

Technical details (affected product, specific vulnerability vectors, impact, and fixes) are not publicly available in the provided documents. Monitor for updates from official advisories and vendor CVE pages.

CVE-2011-4695

Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wpiesandboxescape module for Immunity CANVAS. NOTE: as of 20111207, th...

phpBB MyPage Plugin - SQL Injection

phpBB MyPage Plugin - SQL Injection ==================================================== MyPage plugin phpBB SQL Injection All versions ==================================================== ==================================================== Improve your hacking knowledges !...

Five Star Review v5.1 SQL Injection (recommend.php)

Exploit for php platform in category web applications Exploit Title: Five Star Review Remote SQL Injection recommend.php Script Page : http://www.review-script.com Date: 5-12-2011 Version: Versions below v5.1 Author : EthicalPractice Tested on: Firefox 8.0, Palemoon 8.0, Internet Explorer 9 -...

NJStar Communicator MiniSmtp - Buffer Overflow (ASLR Bypass)

NJStar Communicator MiniSmtp - Buffer Overflow ASLR Bypass Exploit Title: NJStart Communicator MiniSmtp Buffer Overflow ASLR Bypass Date: 02/12/11 Author: Zune - Julian Pulido Software Link: http://www.njstar.com/download/njcom.exe Version: 3.0 Build: 11818 and previous Tested on: Windows 7...