26145 matches found
CVE-2018-16252
FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection...
Xxe
FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection...
CVE-2018-16252
FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection...
CVE-2018-16252
FsPro Labs Event Log Explorer 4.6.1.2115 is affected by an XML External Entity (XXE) injection in the .elx FileType, due to a flaw in the elex.exe handling of crafted ELX files. An attacker can trigger local file disclosure by opening a malicious .elx file, as demonstrated in public writeups. The...
Microsoft Windows Explorer Out-of-Bounds Read Denial of Service Vulnerability
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Explorer is one of the default browsers that comes with Windows operating systems. Microsoft Windows Explorer suffers from an out-of-bounds read denial of service vulnerability. An attacker exploiting...
FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection
FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Title: FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Author: hyp3rlinx Date: 2018-09-01 Vendor: www.eventlogxp.com Software: https://eventlogxp.com/download.php Affected Component: elex.exe CVE:...
FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Vulnerability
Exploit for windows platform in category web applications Title: FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Author: hyp3rlinx Vendor: www.eventlogxp.com Software: https://eventlogxp.com/download.php Affected Component: elex.exe CVE: N/A Description: Upon opening a...
Microsoft Windows Explorer Out-of-Bound Read - Denial of Service (PoC)
Microsoft Windows Explorer Out-of-Bound Read - Denial of Service PoC Exploit Title: Microsoft Windows Explorer Out-of-Bound read - Denial of Service PoC Date: 2018-09-01 Exploit Author: Ghaaf Vendor Homepage: http://www.microsoft.com Version: Windows 7x86/x64 Tested on: 6.1.7601 Service Pack 1...
Microsoft Windows Explorer Out-Of-Bounds Read Denial Of Service
Exploit Title: Microsoft Windows Explorer Out-of-Bound read - Denial of Service PoC Date: 2018-09-01 Exploit Author: Ghaaf Vendor Homepage: http://www.microsoft.com Version: Windows 7x86/x64 Tested on: 6.1.7601 Service Pack 1 Build 7601 CVE: N/A buffer = '' buffer +=...
FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection
Title: FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Author: hyp3rlinx Date: 2018-09-01 Vendor: www.eventlogxp.com Software: https://eventlogxp.com/download.php Affected Component: elex.exe CVE: N/A Description: Upon opening a specially crafted .ELX file in Event Log...
Microsoft Windows Explorer Out-of-Bound Read - Denial of Service (PoC)
Exploit Title: Microsoft Windows Explorer Out-of-Bound read - Denial of Service PoC Date: 2018-09-01 Exploit Author: Ghaaf Vendor Homepage: http://www.microsoft.com Version: Windows 7x86/x64 Tested on: 6.1.7601 Service Pack 1 Build 7601 CVE: N/A buffer = '' buffer +=...
FsPro Labs Event Log Explorer 4.6.1.2115 XML Injection
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/FSPRO-LABS-EVENT-LOG-EXPLORER-XML-INJECTION-INFO-DISCLOSURE.txt + ISR: ApparitionSec Greetz: Greetz: indoushka | Eduardo Vendor www.eventlogxp.com Product Event Log Explorer v4.6.1.2115...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge, related to deficiencies in access control in isolated environments, allow attackers to escalate their privileges.
The vulnerability of browsers Internet Explorer and Microsoft Edge is related to deficiencies in access control in isolated environments. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
August 30, 2018—KB4343894 (Preview of Monthly Rollup)
None None...
August 30, 2018—KB4343891 (Preview of Monthly Rollup)
None None...
The vulnerabilities of Microsoft Edge and Internet Explorer, related to errors in implementing inter-frame interactions, allow attackers to disclose protected information.
The vulnerabilities of Microsoft Edge and Internet Explorer are related to errors in the implementation of inter-frame interaction. Exploiting these vulnerabilities can allow a malicious actor to disclose sensitive information by using a specially crafted web page...
The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.
The vulnerability of JavaScript script handlers in Internet Explorer browsers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...
Microsoft Windows - Advanced Local Procedure Call (ALPC) Local Privilege Escalation
Microsoft Windows - Advanced Local Procedure Call ALPC Local Privilege Escalation Note: PoC will now hijack the print spooler service - spoolsv.exe - as it required less code then hijacking printfilterpipelinesvc.exe, which was shown in the original video demo Description of the vulnerability The...