Microsoft Internet Explorer 释放后重用远程代码执行漏洞(CVE-2013-1347)(MS13-038)

No description provided by source...

USAID a Target of DoL Watering Hole Attackers

One of the nine sites serving malware tied to the recent watering hole attack on the U.S. Department of Labor was located in Cambodia and has ties to the United States Agency for International Development USAID. Speculation has it that the DoL attack was targeting downstream employees at the...

Microsoft IE 8远程代码执行漏洞(CVE-2013-1347)

No description provided by source...

CVE-2013-1347

creationtimestamp| type| source ---|---|--- 2013-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25294 2014-08-01 08:49:58+00:00| seen| MISP/53db4964-af90-4c15-8a3f-68beac1d4fa4 2018-05-29 15:50:33+00:00| seen|...

CVE-2013-1347

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly allocated or 2 is deleted, as exploited in the wild in May 2013...

CVE-2013-1347

CVE-2013-1347 (Internet Explorer 8) is a remote code execution vulnerability in IE8 arising from a use-after-free in CGenericElement/mshtml.dll when handling in-memory objects. Exploitation in the wild during 2013 (notably DoL incident) demonstrated remote code execution by visiting a crafted web...

Microsoft Internet Explorer 8 Use After Free Code Execution - Zero Day (CVE-2013-1347)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer 8. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

RHEL 5 : kernel (RHSA-2012:1347)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1347 advisory. - kernel: Buffer overflow in the HFS plus filesystem different issue than CVE-2009-4020 CVE-2012-2319 - kernel: sfc: potential remote denial...

Ubuntu: Security Advisory (USN-1347-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer 保护模式绕过漏洞(Pwn2Own)

CVE ID：CVE-2011-1347 Microsoft Internet Explorer是一款流行的WEB浏览器。 Internet Explorer保护模式由中等完整性级别和低完整性级别的进程组成。低完整性进程只允许向特定低完整性位置写文件，写入的文件会被标记为低完整性文件。当启动一个新的Internet Explorer进程时会对启动的文件进行完整性级别检查，如果文件属于低完整性级别文件，那么会运行在低完整性模式下。但是如果给定某个文件更低的权限，应用程序在检查过程中由于不匹配'Low Integrity'，导致会以中级完整性级别运行之。攻击者可以利用此漏洞绕过保护模式提升特...

MS11-057: Critical Cumulative Security Update for Internet Explorer (2559049)

The remote host is missing Internet Explorer IE Security Update 2559049. The installed version of IE is affected by several vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55787...

Nic.cl Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Main URI: http://www.nic.cl Type: Cross Site Scripting Exploitable URI: http://www.nic.cl/cgi-bin/show-form?f=/example/201001191941%3Cbody%20onload=alert%28this%29%3E3a6 Status: Reported Date: April 20, 2011, 12:27 p.m. Reported on:...

CVE-2011-1347

Microsoft Internet Explorer 8 on Windows 7 is affected by a Protected Mode bypass vulnerability (CVE-2011-1347) that allowed an attacker to create arbitrary files by leveraging access to a Low integrity process, demonstrated during Pwn2Own 2011 by Stephen Fewer as the third of three chained vulne...

CVE-2010-1347

IBM Systems Director, Director Agent 6.1 prior to 6.1.2.3 on AIX and Linux, is affected. The root cause is incorrect permissions on (1) diruninstall and (2) opt/ibm/director/bin/wcitinst, enabling local privilege escalation by executing these scripts. Exploitation details are not provided in the ...

CVE-2009-1347

The CVE-2009-1347 entry describes multiple SQL injection vulnerabilities in stats/index.php of chCounter 3.1.3, allowing remote attackers to execute arbitrary SQL commands through the login_name (username) or login_pw (password) parameters. This affects the application’s authentication/input hand...

HSPell 1.1 - 'cilla.cgi' Remote Command Execution

!/usr/bin/perl use IO::Socket; print q HSpell v1.1 Command Execution Exploit Theres a 1000 ways to improve this exploit, but I really couldn't be fucked with it. Made By ZeN http://dusecurity.com/ http://darkcode.me/ ; $host = 'site.com'; $port = '80'; $path = '/cgi-bin/cilla.cgi'; ShellMe: print...

CVE-2008-1347

CVE-2008-1347 involves multiple XSS vulnerabilities in the MyioSoft EasyGallery 5.0tr and earlier. The affected component is staticpages/easygallery/index.php , where an attacker can trigger script/HTML injection via the PATH_INFO or the q parameter in the about action of the help system. This en...

CVE-2008-1347

creationtimestamp| type| source ---|---|--- 2008-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5247...

CVE-2003-1347

Geeklog 1.3.7 is affected by multiple XSS vulnerabilities. Attackers can inject arbitrary script via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage field. The CVE-2003-1347 entry documents these issues and their cross-site scripting...

Debian DSA-1347-1 : xpdf - integer overflow

It was discovered that an integer overflow in the xpdf PDF viewer may lead to the execution of arbitrary code if a malformed PDF file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...