VBScript CRegExp::Execute Uninitialized Memory Use

Throughout November, I plan to release details on vulnerabilities I found in web-browsers which I've not released before. This is the fifth entry in that series. The below information is available in more detail on my blog at http://blog.skylined.nl/20161107001.html. There you can find a repro th...

CVE-2016-6363

CVE-2016-6363 affects Cisco Aironet 1800, 2800, and 3800 series Access Points. The DoS stems from the 802.11 rate-limiting feature in the device’s wireless protocol implementation. Cisco’s advisory indicates that unauthenticated, adjacent attackers can trigger a device reload by sending crafted 8...

CVE-2015-6363

Cisco FireSight Management Center Web Framework Cross-Site Scripting Vulnerability (CVE-2015-6363) affects MC 5.4.1.4 and 6.0.1. The root cause is improper sanitization of parameter values in the web framework, allowing an authenticated remote attacker to inject arbitrary script/HTML via unspecif...

CVE-2014-6363

vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "VBScript Memory Corruption Vulnerability."...

CVE-2014-6363

CVE-2014-6363 affects the Microsoft VBScript engine (versions 5.6–5.8) used with Internet Explorer and other products. The issue is a memory corruption vulnerability in VBScript CRegExp/engine handling that can allow remote code execution when a user visits a crafted web page. Exploitation is evi...

Microsoft Windows VBScript Remote Code Execution Vulnerability (3016711)

This host is missing a critical security update according to Microsoft Bulletin MS14-084. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MS14-080: Cumulative Security Update for Internet Explorer (3008923)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3008923. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An attacker can exploit these by convincing a user to visit a...

Microsoft Internet Explorer VBScript Memory Corruption (MS14-080; CVE-2014-6363)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to the way that the VBScript engine handles objects in memory when rendered in Internet Explorer. A remote attacker can exploit this issue by enticing a user to open a specially crafte...

Microsoft VBScript CVE-2014-6363 Remote Code Execution Vulnerability

Description Microsoft VBScript is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies...

Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities

No description provided by source. PENTAGRAM Cerberus P 6363 DSL Router Multiple Vulnerabilities Found by condis Vendor Site / Model: http://www.pentagram.pl/produkty/cerberus-p-6363 Firmware version: V5.07.28PEN01 Software version: V3.0 1. Prolog Cerberus P 6363 is simple SOHO class router. Its...

Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities

Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities PENTAGRAM Cerberus P 6363 DSL Router Multiple Vulnerabilities Found by condis Vendor Site / Model: http://www.pentagram.pl/produkty/cerberus-p-6363 Firmware version: V5.07.28PEN01 Software version: V3.0 1. Prolog Cerberus P 6363 is...

Pentagram Cerberus P 6363 DSL Router - Multiple Vulnerabilities

PENTAGRAM Cerberus P 6363 DSL Router Multiple Vulnerabilities Found by condis Vendor Site / Model: http://www.pentagram.pl/produkty/cerberus-p-6363 Firmware version: V5.07.28PEN01 Software version: V3.0 1. Prolog Cerberus P 6363 is simple SOHO class router. Its producer claims that it may act as ...

DesignWorks Professional '.cct' File BOF Vulnerability

DesignWorks Professional is prone to stack overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6363

DesignWorks Professional is affected by a stack-based buffer overflow in the .cct file handling, specifically in versions 4.3.1 and 5.0.7. The vulnerability can allow a remote attacker to execute arbitrary code by supplying a specially crafted .cct file. This finding is supported by OpenVAS entri...

CVE-2008-6363

creationtimestamp| type| source ---|---|--- 2008-12-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7362...

CVE-2007-6363

IBM Tivoli Netcool Security Manager 1.3.0 is affected by CVE-2007-6363: before Interim Fix 1, AD LDAP authentication allows remote attackers to obtain login access without a password via unspecified vectors. This impacts authentication bypass with AD LDAP and could permit unauthorized access. A f...

CVE-2006-6363

Cross-site scripting XSS vulnerability in admin.pl in BlueSocket Secure Controller BSC before 5.2, or without 5.1.1-BluePatch, allows remote attackers to inject arbitrary web script or HTML via the adname parameter...

CVE-2006-6363

CVE-2006-6363 describes a Cross-site scripting (XSS) vulnerability in admin.pl of BlueSocket Secure Controller (BSC) prior to version 5.2, or without the 5.1.1-BluePatch. An attacker can inject arbitrary web script or HTML via the ad_name parameter. The CVSS data indicates a network-accessible, l...