SFO Websites Hacked: Airport Discloses Data Breach

The San Francisco International Airport SFO disclosed this week two of its websites had been hacked and lead to the disclosure of some users’ login credentials at both sites. The attacks occurred in March and compromised were SFOConnect.com and SFOConstruction.com, both relatively low-traffic...

BTFS: frame injection on bittorrent.com

Hi team, headers.php is injectable. you can see on IE browsers. FULL URL : https://www.bittorrent.com/scripts/site/headers.php?=1586521900793&callback=%3ciframe%20src%3d%22http%3a%2f%2fgoogle.com%2f%3f%22%3e%3c%2fiframe%3e Impact fix them...

MS02-008: XMLHTTP Control in MSXML 2.6 Can Allow Access to Local Files

For additional information about this vulnerability, click the following article numbers to view the articles in the Microsoft Knowledge Base: 317244 MS02-008: XMLHTTP Control in MSXML 4.0 Can Allow Access to Local Files318203 MS02-008: XMLHTTP Control in MSXML 3.0 Can Allow Access to Local...

Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update: April 2014

Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update: April 2014 Important When you install this update 2919355 from Windows Update, updates 2932046, 2937592, 2938439, 2934018, and 2959977 are included in the installation. Important This update 2919355 replaces update 2883200. You don't...

An update that enables Internet Explorer in Windows Vista or in Windows Server 2008 to parse fragmented TLS/SSL handshake messages is available

An update that enables Internet Explorer in Windows Vista or in Windows Server 2008 to parse fragmented TLS/SSL handshake messages is available Warning: The retired, out-of-support Internet Explorer 11 desktop application has been permanently disabled through a Microsoft Edge update on certain...

July 2016 update rollup for Windows Server 2012

July 2016 update rollup for Windows Server 2012 The July 2016 update rollup includes improvements and fixes for the Windows Server 2012 platform. We recommend that you apply this update rollup as part of your regular maintenance routines. Improvements and fixes To learn more about the non-securit...

Explorer.exe may crash when you play back an MPEG-4 file in Windows 8.1 or Windows RT 8.1

Explorer.exe may crash when you play back an MPEG-4 file in Windows 8.1 or Windows RT 8.1 This article describes an issue that occurs when you play back an MPEG-4 file in Windows 8.1 or Windows RT 8.1. Before you install this update, see the Prerequisites section. Symptoms This issue occurs when...

Virtual memory size of Explorer increases when you open programs continuously in Windows 8.1 or Windows Server 2012 R2

Virtual memory size of Explorer increases when you open programs continuously in Windows 8.1 or Windows Server 2012 R2 This article describes a memory leak issue in the Explorer.exe process in Windows 8.1, Windows RT 8.1, or Windows Server 2012 R2. An update is available to fix this issue. Before...

Conflicting files in Internet Explorer favorites when Work Folders is installed in Windows 8.1

Conflicting files in Internet Explorer favorites when Work Folders is installed in Windows 8.1 This article describes a Work Folders issue in Windows 8.1. You can fix this issue by using the update in this article. Before you install this update, see the Prerequisites section. Symptoms User's...

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Internet Explorer Memory Corruption Vulnerability.” ! Recent assessments: ebleiweiss-r7 at September 12, 2019 6:07pm UTC reported: Wind...

Product Key Explorer 4.2.2.0 - 'Key' Denial of Service (PoC)

Exploit Title: Product Key Explorer 4.2.2.0 - 'Key' Denial of Service PoC Discovery by: 0xMoHassan Date: 2020-04-04 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/productkeyexplorersetup.exe Tested Version: 4.2.2.0 Vulnerability Type: Denial of Service...

Product Key Explorer 4.2.2.0 - (Key) Denial of Service Exploit

Exploit Title: Product Key Explorer 4.2.2.0 - 'Key' Denial of Service PoC Discovery by: 0xMoHassan Date: 2020-04-04 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/productkeyexplorersetup.exe Tested Version: 4.2.2.0 Vulnerability Type: Denial of Service...

Product Key Explorer 4.2.2.0 Denial Of Service

Exploit Title: Product Key Explorer 4.2.2.0 - 'Key' Denial of Service PoC Discovery by: 0xMoHassan Date: 2020-04-04 Vendor Homepage: http://www.nsauditor.com Software Link: http://www.nsauditor.com/downloads/productkeyexplorersetup.exe Tested Version: 4.2.2.0 Vulnerability Type: Denial of Service...

CVE-2019-11702

A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP:, can be used to open local files at a known location with Internet Explorer if a user approves execution when prompted. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This...

10-Strike Network Inventory Explorer 9.03 - (Read from File) Buffer Overflow (SEH) (ROP) Exploit

Exploit Title: 10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow SEHROP Exploit Author: Hodorsec Version: 9.03 Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-setup.exe Vendor Homepage: https://www.10-strike.com Tested on: Win8.1 x64 ...

10-Strike Network Inventory Explorer 9.03 Buffer Overflow

!/usr/bin/python Exploit Title: 10-Strike Network Inventory Explorer - Read-from-file Buffer Overflow SEHROP Version: 9.03 Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-setup.exe Date: 2020-03-30 Exploit Author: Hodorsec [email protected] /...

10-Strike Network Inventory Explorer - (srvInventoryWebServer) Unquoted Service Path Vulnerability

Exploit for php platform in category web applications Exploit Title: 10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path Author: Felipe Winsnes Vendor Homepage: https://www.10-strike.com/ Software Link:...

10-Strike Network Inventory Explorer 8.54 Unquoted Service Path

Exploit Title: 10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path Date: 2020-03-24 Author: Felipe Winsnes Vendor Homepage: https://www.10-strike.com/ Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-setup.exe Version: 8.54 Teste...

10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)

Exploit Title: 10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow SEH Date: 2020-03-24 Author: Felipe Winsnes Vendor Homepage: https://www.10-strike.com/ Software Link: https://www.10-strike.com/networkinventoryexplorer/network-inventory-setup.exe Version: 8.54 Tested on:...

10-Strike Network Inventory Explorer - srvInventoryWebServer Unquoted Service Path

10-Strike Network Inventory Explorer - srvInventoryWebServer Unquoted Service Path Exploit Title: 10-Strike Network Inventory Explorer - 'srvInventoryWebServer' Unquoted Service Path Date: 2020-03-24 Author: Felipe Winsnes Vendor Homepage: https://www.10-strike.com/ Software Link:...