PT-2019-7913

Name of the Vulnerable Software and Affected Versions WebFile Explorer version 1.0 Description The issue allows for Arbitrary File Download remotely. It is related to a SQL Injection vulnerability. The component download.php is affected, specifically the variable $file = $ GET'id'. The attack...

Moderate: Red Hat Bug Fix Advisory: ovirt-engine-api-explorer bug fix and enhancement update for RHV 4.3

Updated ovirt-engine-api-explorer packages that fix several bugs and add various enhancements are now available. The ovirt-engine-api-explorer package provides a web application for exploring the oVirt API documentation...

Shopify: help.shopify.com Cross Site Scripting

Hello Security Team. Tested windows 10 and edge Microsoft Edge 44.17763.1.0 , internet explorer Test Url : https://help.shopify.com/it/partners/resources/marketing-pack-for-accountants Payload: ?v0sjx'-alert1-'uyvvr=1 Proof Url: Open Url: edge , internet explorer , click me "Condividi il tuo...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Watson Explorer, Watson Content Analytics and Watson Explorer Content Analytics Studio

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 and Version 7 used by Watson Explorer, Watson Content Analytics and Watson Explorer Content Analytics Studio. Watson Explorer, Watson Content Analytics and Watson Explorer Content Analytics Studio have addresse...

Internet Explorer Heap Buffer Overflow

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially created web page...

Microsoft Edge Internet Explorer Data Compromise

The vulnerabilities of Microsoft Edge and Internet Explorer exist due to insufficient validation of input data. Exploiting these vulnerabilities allows a malicious actor to compromise the confidentiality of protected information through a specially created web page...

Internet Explorer Heap Buffer Overflow

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially created web page...

Internet Explorer Heap Buffer Overflow

The vulnerability of the Internet Explorer browser arises from an operation that goes beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the context of the current user, using a specially created web page...

Microsoft Internet Explorer XXE Injection Information Disclosure

An XML External Entity Injection Vulnerability Exists in Internet Explorer browser. This vulnerability is due to a flaw when parsing a malicious MHT file containing a reference to an external entity. Successful exploitation of this vulnerability could allow remote attacker to potentially exfiltra...

Internet Explorer XML Analyzer Disclosure

The vulnerability of the XML browser analyzer Internet Explorer is related to a bug that restricts XML links to external objects. Exploiting this vulnerability can allow an attacker to gain access to local files and disclose protected information using a specially crafted MHT file MHTML Web Archi...

Internet Explorer Script Handler Unauthorized Access

The vulnerability of Internet Explorer JavaScript script handlers is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Microsoft Internet Explorer XML Injection Vulnerability

Microsoft Internet Explorer is a Web browser that comes with the Windows operating system. Microsoft Internet Explorer suffers from an XML injection vulnerability. An attacker could exploit this vulnerability to conduct XML injection attacks...

Microsoft Internet Explorer Property Put Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Internet Explorer 11 - XML External Entity Injection

Microsoft Internet Explorer 11 - XML External Entity Injection + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-v11-XML-EXTERNAL-ENTITY-INJECTION-0DAY.txt + ISR: ApparitionSec Vendor...

Microsoft Internet Explorer 11 - XML External Entity Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-v11-XML-EXTERNAL-ENTITY-INJECTION-0DAY.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Microsoft Internet Explorer v11 latest version...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2019-17528)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the scripting engine handles memory objects in Microsoft IE 10 and 11. A remote attacker could exploit this...

Microsoft Internet Explorer 11 XML Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-v11-XML-EXTERNAL-ENTITY-INJECTION-0DAY.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Microsoft Internet Explorer v11 latest version...

Microsoft Internet Explorer 11 XML Injection Exploit

Exploit for windows platform in category remote exploits + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-v11-XML-EXTERNAL-ENTITY-INJECTION-0DAY.txt + ISR: ApparitionSec Vendor www.microsoft.com...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2019-17527)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the scripting engine handles memory objects in Microsoft IE 10 and 11. A remote attacker could exploit this...

Patch Tuesday Lowdown, April 2019 Edition

Microsoft today released fifteen software updates to fix more than 70 unique security vulnerabilities in various flavors of its Windows operating systems and supported software, including at least two zero-day bugs. These patches apply to Windows, Internet Explorer IE and Edge browsers, Office,...