Lucene search
K

6 matches found

ThreatPost
ThreatPost
added 2018/04/10 2:48 p.m.34 views

Quant Loader Trojan Spreads Via Microsoft URL Shortcut Files

Researchers are warning of a new email phishing campaign that downloads and launches the Quant Loader trojan, capable of distributing ransomware and stealing passwords. Barracuda on Tuesday said it has been tracking emails containing zipped Microsoft internet shortcut files with a “.url” file...

5.1CVSS0.7AI score0.11774EPSS
Exploits1References5
Circl
Circl
added 2018/03/14 10:19 a.m.3 views

CVE-2016-3353

creationtimestamp| type| source ---|---|--- 2018-03-14 10:19:20+00:00| exploited| https://t.me/informationsecuritychannel/14214...

8.3CVSS8AI score0.11774EPSS
Exploits1References1
seebug.org
seebug.org
added 2017/02/24 12:0 a.m.80 views

MS16-104: Internet Explorer URL files Security Feature Bypass (CVE-2016-3353)

On September 13th, 2016 Microsoft released security bulletin MS16-104 1, which addresses several vulnerabilities affecting Internet Explorer. One of those vulnerabilities is CVE-2016-3353, a security feature bypass bug in the way .URL files are handled. This security issue does not allow for remo...

5.1CVSS8.7AI score0.11774EPSS
Exploits1
NVD
NVD
added 2016/09/14 10:59 a.m.26 views

CVE-2016-3353

Microsoft Internet Explorer 9 through 11 mishandles .url files from the Internet zone, which allows remote attackers to bypass intended access restrictions via a crafted file, aka "Internet Explorer Security Feature Bypass."...

8.3CVSS8AI score0.11774EPSS
Exploits1References4
CVE
CVE
added 2016/09/14 10:0 a.m.100 views

CVE-2016-3353

CVE-2016-3353 affects Microsoft Internet Explorer 9–11. The vulnerability arises because IE mishandles .url shortcut files from the Internet zone, enabling a security feature bypass that could bypass access restrictions via a crafted file and is described as the Internet Explorer Security Feature...

8.3CVSS7.4AI score0.11774EPSS
Exploits1References4Affected Software1
Kaspersky
Kaspersky
added 2016/09/13 12:0 a.m.54 views

KLA11907 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of...

9.3CVSS9.4AI score0.4007EPSS
Exploits8References35
Rows per page
Query Builder