Microsoft Internet Explorer Memory Corruption (CVE-2020-1062)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Analyzing Dark Crystal RAT, a C# Backdoor

The FireEye Mandiant Threat Intelligence Team helps protect our customers by tracking cyber attackers and the malware they use. The FLARE Team helps augment our threat intelligence by reverse engineering malware samples. Recently, FLARE worked on a new C variant of Dark Crystal RAT DCRat that the...

PT-2020-2837

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context of the current user,...

PT-2020-2840

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context of the current user,...

PT-2020-2839

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code in the context of the current user,...

PT-2020-2843

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to improper memory object access. This could allow an attacker to execute arbitrary code in the context of the current user, potentially...

Security Updates for Internet Explorer (May 2020)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker could execute arbitrary code in the...

PT-2020-2838

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in handling objects in memory by the VBScript engine. Exploitation of this issue could allow a remote attacker to execute arbitrary code. This could...

KB4556854: Windows Server 2008 May 2020 Security Update

The remote Windows host is missing security update 4556854 or cumulative update 4556860. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited thi...

PT-2020-2842

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is related to errors in processing objects in memory, which can be exploited by a remote attacker to elevate privileges and execute arbitrary code. This can lead to memory...

Microsoft Internet Explorer JScript Garbage Collection Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Internet Explorer CWMPErrorDlg Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

KLA11771 Multiple vulnerabilities in Microsoft Internet Explorer and Edge

Multiple vulnerabilities were found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in MSHTML Engine c...

KLA11777 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denia...

ManageEngine Asset Explorer Windows Agent Remote Code Execution Vulnerability

Exploit for php platform in category web applications ManageEngine Asset Explorer Windows Agent Remote Code Execution Vulnerability Identifiers ------------------------------------------------- CVE-2020-8838 XL-20-003 CVSSv3 score ------------------------------------------------- 7.5...

Microsoft Internet Explorer Memory Corruption(CVE-2019-1221)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

ManageEngine Asset Explorer Windows Agent Remote Code Execution

XL-2020-003 - Asset Explorer Windows Agent - Remote Code Execution =============================================================================== Identifiers ------------------------------------------------- CVE-2020-8838 XL-20-003 CVSSv3 score ------------------------------------------------- 7...

File Explorer 1.4 Access Bypass

Document Title: =============== File Explorer v1.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2219 Release Date: ============= 2020-05-04 Vulnerability Laboratory ID VL-ID:...

File Explorer v1.4 iOS - Multiple Persistent Vulnerabilities

Document Title: =============== File Explorer v1.4 iOS - Multiple Persistent Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2219 Release Date: ============= 2020-05-03 Vulnerability Laboratory ID VL-ID:...

MS02-008: XMLHTTP control in MSXML 4.0 can allow access to local files

For additional information about this vulnerability, click the following article numbers to view the articles in the Microsoft Knowledge Base:318203 MS02-008: XMLHTTP control in MSXML 3.0 can allow access to local files318202 MS02-008: XMLHTTP control in MSXML 2.0 can allow access to local...