CVE-2016-8030: Improper Restriction of Operations within the Bounds of a Memory Buffer

A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link...

print24.com XSS vulnerability

Vulnerable URL: http://print24.com/de/?sid=ee80de5ee926bd5f1c562603ba6b83fc=kalkulierenpg=="onmouseover=alertString.fromCharCode88,83,83,80,79,83,69,68"==login Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:|...

yd1688.com XSS vulnerability

Vulnerable URL: http://www.yd1688.com/en/about.php?id='" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:36 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16561817 VIP website status:| No Check yd1688.com...

VirtualBox 5.0.32 r112930 x64 - Windows Process COM Injection Privilege Escalation Exploit

Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103 VirtualBox: Windows Process COM Injection EoP Platform: VirtualBox v5.0.32 r112930 x64 Tested on Windows 10 Class: Elevation of Privilege Summary: The process hardening...

VirtualBox 5.0.32 r112930 x64 - Windows Process COM Injection Privilege Escalation Exploit

Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103 VirtualBox: Windows Process COM Injection EoP Platform: VirtualBox v5.0.32 r112930 x64 Tested on Windows 10 Class: Elevation of Privilege Summary: The process hardening...

mariner7.com XSS vulnerability

Vulnerable URL: https://mariner7.com/SendEmail.asp?email="'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22315450 VIP website status:| No Check mariner7.com SSL connection:|...

PT-2017-8550

Name of the Vulnerable Software and Affected Versions Geeklog IVYWE edition version 2.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML, leveraging the use of the COM getCurrentURL function in various template files, including 1 public...

Oracle VM VirtualBox 5.0.32 r112930 (x64) - Windows Process COM Injection Privilege Escalation

Oracle VM VirtualBox 5.0.32 r112930 x64 - Windows Process COM Injection Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103 VirtualBox: Windows Process COM Injection EoP Platform: VirtualBox v5.0.32 r112930 x64 Tested on Windows 10 Class: Elevation of...

Oracle VM VirtualBox 5.0.32 r112930 (x64) - Windows Process COM Injection Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1103 VirtualBox: Windows Process COM Injection EoP Platform: VirtualBox v5.0.32 r112930 x64 Tested on Windows 10 Class: Elevation of Privilege Summary: The process hardening implemented by the VirtualBox driver can be circumvented ...

fushi.x0.com XSS vulnerability

Vulnerable URL: http://fushi.x0.com/cap/Navi/menuright.php?tagkeyword= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

trbet22.com XSS vulnerability

Vulnerable URL: https://www.trbet22.com/ps/game"--!"/GameContainer.action/KNOXSS Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

Microsoft Windows - Uncredentialed SMB RCE (MS17-010) Exploit

This Metasploit module uses information disclosure to determine if MS17-010 has been patched or not. Specifically, it connects to the IPC$ tree and attempts a transaction on FID 0. If the status returned is "STATUSINSUFFSERVERRESOURCES", the machine does not have the MS17-010 patch. This Metasplo...

CVE-2017-0199: Microsoft Office RTF vulnerability using the PoC-vulnerability warning-the black bar safety net

0x01 description From FireFye detect and publish CVE-2017-0199 since, I have been researching this vulnerability in Microsoft officially released the patch, I decided to release this PoC. I use way possible with other researchers using different methods, the use of the method may be little bit...

erptraining9.com XSS vulnerability

Vulnerable URL: http://www.erptraining9.com/payment.php?id=basictraining"';-- Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 19:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1960976 VIP website status:| ...

CVE-2017-0199: analysis Microsoft Office RTF vulnerability-vulnerability warning-the black bar safety net

FireEye recently detected using CVE-2017-0199 security vulnerabilities malicious Microsoft Office RTF document, be aware of CVE-2017-0199, but had not been disclosed vulnerability. When the user opens that contains the exploit Code of the document, the malicious code will download and execute the...

innovatorsrace50.com XSS vulnerability

Open Bug Bounty ID: OBB-223467 Description| Value ---|--- Affected Website:| innovatorsrace50.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

camp24.com XSS vulnerability

Open Bug Bounty ID: OBB-222627 Description| Value ---|--- Affected Website:| camp24.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

privatbank1891.com XSS vulnerability

Open Bug Bounty ID: OBB-222463 Description| Value ---|--- Affected Website:| privatbank1891.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

avenue5.com XSS vulnerability

Vulnerable URL: http://www.avenue5.com/Community-Search-List-View.aspx?q=California=%22--%3E%20%3C/script%3E%3Csvg/onload=%27;alert/OPENBUGBOUNTY/;%27%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2323566 VI...

Adups Local Information Disclosure Vulnerability

Adups Fota is a professional wireless upgrade solution for IoT devices smart car, wearable, home, VR, etc. from Shanghai Guangsheng Information Technology Co. Adups suffers from a local information disclosure vulnerability. The vulnerability is caused by the AndroidManifest.xml file of the...