CVE-2014-4199

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp...

CVE-2014-4200

CVE-2014-4200 concerns vm-support 0.88 in VMware Tools (distributed with VMware Workstation up to 10.0.3 and related products). The underlying issue is that the vm-support archive is created with 0644 permissions, allowing local users to extract sensitive files from the archive. The public detail...

VMware Workstation < 9.0.4 / 10.0.3 OpenSSL Library Multiple Vulnerabilities (Linux)

The version of VMware Workstation installed on the remote host is version 9.x prior to 9.0.4 or 10.x prior to 10.0.3. It is, therefore, affected by the following vulnerabilities in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into...

VMware Workstation < 9.0.4 / 10.0.3 OpenSSL Library Multiple Vulnerabilities (Windows)

The version of VMware Workstation installed on the remote host is version 9.x prior to 9.0.4 or 10.x prior to 10.0.3. It is, therefore, affected by the following vulnerabilities in the OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into...

DATAC RealWin SCADA 1.06 - Buffer Overflow Exploit

No description provided by source. Exploit Title: RealWin SCADA System SEH Overwrite Date: 10-27-10 Author: Blake Software Link: http://www.realflex.com/products/realwin/realwin.php Version: 1.06 Tested on: Windows XP SP3 running in VMware Workstation rfx import socket, sys if lensys.argv!= 3:...

Audio Workstation 6.4.2.4.0 - (.pls) Universal Local BoF Exploit

No description provided by source. !/usr/bin/python Audio Workstation v6.4.2.4.0 .pls Universal Local BoF Exploit Credits: germayax Coded by: mrme Tested on Windows XP SP3 Note: For educational purposes only mrme@home:$ nc -v 192.168.0.6 4444 192.168.0.6: inverse host lookup failed: Unknown serve...

Audio Workstation 6.4.2.4.3 pls Buffer Overflow

No description provided by source. $Id: audiowkstnpls.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

VMware Workstation <= 7.1.1 VMkbd.sys Denial of Service Exploit

No description provided by source. !/usr/bin/python Title: VMware Workstation = 7.1.1 VMkbd.sys Denial of Service Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.vmware.com Platform: Windows Vista Tested: VMware Workstation v7.1.1 build-282343 Vulnerable: VMware Workstation = 7.1.1...

Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3 DoS Duplicate Hostname Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/298/info NT Workstations and Servers must have unique hostnames if they reside on the same network. Should an NT host attempt to use an existing hostname, the second server with the new duplicate name will fail to start i...

Windows 95/98/Enterprise Server 4/NT Server 4/Terminal Server 4/Workstation 4 Riched Buffer Overflow

No description provided by source. Windows 95/98,Windows NT Enterprise Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a,Windows NT Terminal Server 4.0 SP1/SP2/SP3/SP4/SP5/SP6,Windows NT Workstation 4.0 SP1/SP2/SP3/SP4/SP5/SP6/SP6a Riched Buffer Overflow...

NSHC Papyrus 2.0 - Heap Overflow Vulnerability

No description provided by source. !/usr/bin/python Title: NSHC Papyrus Heap Overflow Vulnerability Date: 13\08\2011 Author: wh1ant Software Link: http://file.atfile.com/ftp/data/03/PapyrusSetup.exe Version: 2.0 Tested On: windows XP SP3 South Korea / windows XP SP3 English VMware Workstation CVE...

cyan soft Multiple Applications Format String Vulnerability and Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27728/info Multiple cyan soft products are affected by a format-string vulnerability because they fail to adequately sanitize user-supplied input before passing it as the format-specifier to a formatted-printing function...

Creative Ensoniq PCI ES1371 WDM Driver 5.1.3612 Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27179/info Creative Ensoniq PCI ES1371 WDM drivers are prone to a local privilege-escalation vulnerability. Successful exploits allow local users to execute arbitrary machine code with kernel-level privileges, facilitatin...

E-Mail Security Virtual Appliance (ESVA) Remote Execution

No description provided by source. Exploit Title: E-Mail Security Virtual Appliance ESVA Remote Execution. Date: 10 Aug 2012 Exploit Author: iJoo Vendor Homepage: http://www.esvacommunity.com/ Software Link: http://sourceforge.net/projects/esva-project/ Version: 2.0.6 ESVA E-Mail Security Virtual...

Microsoft Workstation Service NetpManageIPCConnect Overflow

No description provided by source. $Id: ms06070wkssvc.rb 10554 2010-10-05 19:29:10Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Solaris 7/8 kcms_configure Command-Line Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/2558/info The Kodak Color Management System, or KCMS, is a package that ships with workstation installations of Solaris 7 and 8. kcmsconfigure, a part of KCMS, is vulnerable to a buffer overflow if it is passed an overly...

Microsoft Workstation Service NetAddAlternateComputerName Overflow

No description provided by source. $Id: ms03049netapi.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Conectiva 4.x/5.x,RedHat 6.x pam_console Remote User Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1513/info There is a vulnerability in the Linux pamconsole module that could allow an attacker to remotely reboot the workstation or perform other actions limited to local users. If a workstation is configured to use a...

Multiple MicroWorld eScan Products Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with...

MP3 Workstation 9.2.1.1.2 - SEH exploit

No description provided by source. MP3 Workstation Version 9.2.1.1.2 SEH exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable application from http://www.e-soft.co.uk/MP3%20Workstation.htm Vulnerable version MP3 Workstation Version 9.2.1.1.2 Tested on XP SP2 Greets Puneet Jain ...