AutoPlay 1.33 (autoplay.ini) - Local Buffer Overflow (SEH)

!/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini files that can be edited and stored to compact disks...

Escort Agency CMS Blind SQL Injection Vunerability

Exploit for php platform in category web applications Exploit Title: Escort Agency CMS Blind SQL Injection Vunerability Google Dork: "Powered by Escort agency CMS - Escort agency webdesign" Platform: php, webapp Date: 10.02.2011 Author: NoNameMT Software Link:...

VMware Releases Advisory for Windows 7 Users

VMware has released an advisory to alert users of an issue affecting VMware on the Microsoft Windows 7 platform. This issue prevents VMware from connecting from the View Client on Windows 7 to the View Connection Server after installing the Microsoft patches 2482017 and 2467023 from Microsoft...

Spoofing

Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerabilit...

Code injection

The OpenType Compact Font Format CFF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitra...

CVE-2011-0033

The OpenType Compact Font Format CFF driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate parameter values in OpenType fonts, which allows remote attackers to execute arbitra...

CVE-2011-0091

The CVE-2011-0091 issue affects Kerberos in Windows 7 and Windows Server 2008 R2, where sessions can be downgraded from strong encryption to DES. This enables man-in-the-middle attackers to spoof traffic and potentially access sensitive data within Kerberos sessions. Root cause: Windows Kerberos ...

CVE-2011-0091: Improper Authentication

Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerabilit...

PT-2011-2030 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, and R2 Microsoft Windows 7 Description: The issue arises from t...

CVE-2011-0090

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, ak...

CVE-2011-0088

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, ak...

Input validation

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate user-mode input, which allows local users to gain privileges via a crafted application, ak...

Information disclosure

The 1 JScript 5.8 and 2 VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, a...

Model Agentur Script SQL Injection Vunerability

Exploit for php platform in category web applications Exploit Title: Model Agentur Script SQL Injection Vunerability Platform: php Date: 05.02.2011 Author: NoNameMT Software Link: http://www.media-products.de/model-agentur-p-269.html AND http://www.media-products.de/model-agentur-v2-p-420.html...

Microsoft JScript and VBScript Scripting Engines Information Disclosure Vulnerability (2475792)

This host is missing a critical security update according to Microsoft Bulletin MS11-009. OpenVAS Vulnerability Test $Id: secpodms11-009.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft JScript and VBScript Scripting Engines Information Disclosure Vulnerability 2475792 Authors: Madhuri D...

CVE-2011-0031: Exposure of Sensitive Information to an Unauthorized Actor

The 1 JScript 5.8 and 2 VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7 do not properly load decoded scripts obtained from web pages, which allows remote attackers to trigger memory corruption and consequently obtain sensitive information via a crafted web site, a...

Microsoft Kerberos Privilege Escalation Vulnerabilities (2496930)

This host is missing a critical security update according to Microsoft Bulletin MS11-013. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-0031

The CVE-2011-0031 issue affects the JScript 5.8 and VBScript 5.8 scripting engines in Microsoft Windows Server 2008 R2 and Windows 7. The root cause is improper loading of decoded scripts obtained from web pages, which can trigger memory corruption and lead to information disclosure when a user v...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2479628)

This host is missing a critical security update according to Microsoft Bulletin MS11-012. OpenVAS Vulnerability Test $Id: secpodms11-012.nasl 8724 2018-02-08 15:02:56Z cfischer $ Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities 2479628 Authors: Sooraj KS Copyright: Copyright c 2011...

Internet Information Services (IIS) FTP Service Remote Code Execution Vulnerability (2489256)

This host is missing a critical security update according to Microsoft Bulletin MS11-004. OpenVAS Vulnerability Test $Id: secpodms11-004.nasl 7582 2017-10-26 11:56:51Z cfischer $ Internet Information Services IIS FTP Service Remote Code Execution Vulnerability 2489256 Authors: Sooraj KS Copyright...