16608 matches found
Microsoft MPEG-4 Codec Media File Remote Code Execution Vulnerability
Description Microsoft MPEG-4 codec is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or view a web page containing a malicious file. A successful exploit will result in the execution of arbitrary...
Adobe LiveCycle ES DLL Hijacking
www.BugReport.ir AmnPardaz Security Research Team Title: Adobe LiveCycle ES DLL Hijacking Exploit .dll Vendor: http://www.adobe.com/products/livecycle/ Vulnerable Version: 8.2.1.3144.1.471865 Exploitation: Remote Code Execution - Description: Adobe® LiveCycle® Enterprise Suite ES software can hel...
MS10-067: Vulnerability in WordPad Text Converters Could Allow Remote Code Execution (2259922)
The remote host contains a vulnerable version of Microsoft WordPad, Office, or Office Converter Pack. Opening a specially crafted Word 97 file can result in the execution of arbitrary code. A remote attacker could exploit this by tricking a user into opening a malicious Word file. C Tenable Netwo...
Microsoft WordPad Text Converter Word 97 File Parsing Memory Corruption Vulnerability
Description Microsoft WordPad Text Converter is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may result in denial-of-service conditions. Technologies...
NCP Secure Entry Client v.9.23.017 DLL Hijacking Exploit
Exploit for windows platform in category local exploits ======================================================== NCP Secure Entry Client v.9.23.017 DLL Hijacking Exploit ======================================================== / Exploit Title: NCP Secure Entry Client v.9.23.017 DLL Hijacking...
About the security content of Safari 5.0.2 and Safari 4.1.2
About the security content of Safari 5.0.2 and Safari 4.1.2 Last Modified: September 07, 2010 Article: HT4333 Email this article Print this page Summary This document describes the security content of Safari 5.0.2 and Safari 4.1.2. For the protection of our customers, Apple does not disclose,...
Microsoft Windows RPC Memory Allocation Remote Code Execution Vulnerability
Description Microsoft Windows RPC is prone to a remote code-execution vulnerability. An attacker can exploit this issue by sending a specially crafted RPC request to an affected computer. Successfully exploiting this issue will allow the attacker to execute arbitrary code with full system rights,...
Microsoft Windows and Office Uniscribe Font Parsing Engine Remote Code Execution Vulnerability
Description Microsoft Windows and Office are prone to a remote code-execution vulnerability when handling crafted font data. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. A successful exploit may allow arbitrary code to run in the context...
MS10-062: Vulnerability in MPEG-4 Codec Could Allow Remote Code Execution (975558)
The MPEG-4 codec, which is included with Windows Media codecs, contains a buffer overflow vulnerability that can be triggered by a specially crafted media file that uses MPEG-4 video encoding. If an attacker can trick a user on the affected system into opening a specially crafted media file or...
MS10-061: Vulnerability in Print Spooler Service Could Allow Remote Code Execution (2347290) (EMERALDTHREAD)
The version of the Print Spooler service on the remote Windows host is affected by a service impersonation vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code on a Windows XP system to escalate privileges on all other supported Windows systems. EMERALDTHREAD is...
MS10-065: Description of the security update for Internet Information Services ASP: September 14, 2010
None None...
MS10-012: Vulnerabilities in SMB Could Allow Remote Code Execution (971468) (uncredentialed check)
The remote host is affected by several vulnerabilities in the SMB server that may allow an attacker to execute arbitrary code or perform a denial of service against the remote host. These vulnerabilities depend on access to a shared drive, but do not necessarily require credentials. C Tenable...
AlstraSoft AskMe Pro 2.1 forum_answer.php?que_id SQL Injection Vulnerability
AlstraSoft AskMe Pro 2.1 forumanswer.php?queid SQL Injection Vulnerability. Webapps exploit for php platform ================================================================== Exploit Title: AlstraSoft AskMe Pro SQL Injection Vulnerability Date: 12/09/2010 Author: Amine92 Email:...
Prevx DLL preloading exploit
Exploit for windows platform in category local exploits ============================ Prevx DLL preloading exploit ============================ ============================ Prevx DLL preloading exploit ============================ ==================================================== = PREVX DLL...
AlstraSoft AskMe Pro 2.1 SQL Injection Vulnerability
Exploit for php platform in category web applications ==================================================== AlstraSoft AskMe Pro 2.1 SQL Injection Vulnerability ==================================================== Author: Amine92 Email: email protected Software Link:...
QK SMTP Server 3 RCPT TO: Command DoS
Exploit for windows platform in category dos / poc ===================================== QK SMTP Server 3 RCPT TO: Command DoS ===================================== Author: antrhacks Software Link: http://www.qksoft.com/qk-smtp-server/download.php Version: 3.01 Platform: Windows XP SP3 Home editi...
System Shop (Module aktka) SQL Injection Vulnerability
Exploit for php platform in category web applications ====================================================== System Shop Module aktka SQL Injection Vulnerability ====================================================== Exploit Title: System Shop SQL Injection - Module aktkat= Date: 12.09.2010 Autho...
Webkit Memory Corruption
TITLE: WEBKIT APPLE SAFARI 4.1.2/5.0.2 & GOOGLE CHROME 5.0.375.125 MEMORY CORRUPTION VULNERABILITY TESTED OS: WINDOWS XP SP3 SEVERITY: HIGH CVE-NUMBER: CVE-2010-1813 DISCOVERED DATE: 2010-06-29 FIXED DATE: GOOGLE CHROME 2010-07-26 & APPLE SAFARI 2010-09-08 FIXED VERSIONS: GOOGLE CHROME 5.0.375.12...
HP Data Protector Media Operations 6.11 (Multiple Modules) - Null Pointer Dereference Denial of Service
Exploit Title: HP Data Protector Media Operations 6.11 Multiple NULL Pointer Dereference Local DoS 0day Date: 11/09/2010 Author: d0lc3 d0lc3xatgmaildomcom Author Link: http://elotrolad0.blogspot.com/ Software Link: trial https://h10078.www1.hp.com/cda/hpdc/navigation.do?...
Audiotran 1.4.2.4 SEH Overflow
Audiotran 1.4.2.4 SEH Overflow Exploit 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.e-soft.co.uk/Audiotran.htm Vulnerable version...