cesar cerrudo vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote malicious users to execute operating system commands via a request to (1) rawdocdata.asp or (2) RawCustomSearchField.asp containing an emb...

Microsoft Biztalk Server 2000 Microsoft Biztalk Server 2002

2 EDB exploits

The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2)...

Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Vista Gold Microsoft Windows Xp

1 EDB exploit

The ThreadPool class in Windows Vista Gold and SP1, and Server 2008, does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to gain privilege...

Microsoft Windows Server 2008 -Microsoft Windows Vista -

1 EDB exploit

The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under the NetworkService account or (2) all run under the LocalService account, which allows local users to g...

Microsoft Windows Server 2003 Microsoft Windows Xp

1 EDB exploit

The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrate...

Microsoft Windows 2000

1 EDB exploit

Microsoft SQL Server 2000 SP2, when configured as a distributor, allows malicious users to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.

Microsoft Sql Server 2000

1 EDB exploit

Apple Safari allows remote malicious users to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property val...

1 EDB exploit

WebKit before r53607, as used in Google Chrome prior to 4.0.249.89, allows remote malicious users to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and the...

Google Chrome Google Chrome 0.2.149.27 Google Chrome 0.2.149.29 Google Chrome 0.2.149.30 Google Chrome 0.2.152.1 Google Chrome 0.2.153.1 Google Chrome 0.3.154.0 Google Chrome 0.3.154.3 Google Chrome 0.4.154.18 Google Chrome 0.4.154.22 Google Chrome 0.4.154.31 Google Chrome 0.4.154.33

1 EDB exploit

LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program.

Microsoft Windows 2000 Microsoft Windows 2003 Server Datacenter 64-bit Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Enterprise 64-bit Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Xp

1 EDB exploit

Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might allow context-dependent malicious users to gain privileges by using one service process to capture a res...

Microsoft Windows-nt Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Vista -Microsoft Windows Xp

1 EDB exploit

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook