CommuniGatePro 6.1.16 Cross Site Scripting

Exploit Title: CommuniGatePro webmails Multiple Stored XSS Date: 15/11/2017 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.stalker.com/ Software Link: http://www.stalker.com/ paid product Version: 6.1.16 Tested on: production server on crystal, pron...

amtyThumb posts 8.1.3 - Unauthenticated Cross-Site Scripting (XSS)

Exploitation limited to Internet Explorer. Please refer to the references for further information...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of November 13, 2017

The dreaded white, blank screen in Microsoft Word is taunting me, with its blinking cursor asking for words to be written. Just when I thought I wouldn’t get any inspiration for this week’s blog, inspiration came to me from beyond through our late CTO Raimund Genes. Earlier this week, the third...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2017-34718)

Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer is implemented with a memory corruption vulnerability that can be exploited by unauthenticated, remote attackers to execute arbitrary code on the target system...

Microsoft Internet Explorer/Edge Memory Corruption Vulnerability

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into Windows 10 versions. A memory corruption vulnerability exists in Microsoft Internet Explorer/Edge, which could allow an unauthenticated, remote attacker to execute arbitrary code on the target system...

Microsoft Internet Explorer/Edge Scripting Engine Memory Corruption Vulnerability

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into the Windows 10 version. A remote code execution vulnerability exists in IE version 11 in Microsoft Windows and ChakraCore in Edge. A remote attacker can exploit this vulnerability to execute arbitrary...

Microsoft Internet Explorer/Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-34714)

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into Windows 10 versions. A memory corruption vulnerability exists in the scripting engine implementation of Microsoft Edge/Microsoft Internet Explorer due to improper memory manipulation by the program. An...

Microsoft Windows Internet Explorer Remote Code Execution Vulnerability (CNVD-2017-37103)

Microsoft Windows 7 SP1 and others are a series of operating systems from Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in versions 9, 10, and 11 of IE in Microsoft Windows...

Microsoft Internet Explorer Scripting Engine Information Disclosure Vulnerability (CNVD-2017-34446)

Internet Explorer IE is a web browser that comes with the Windows operating system. scripting engines is one of the JavaScript engine components. An information disclosure vulnerability exists in the scripting engine in versions 9, 10, and 11 of IE for Microsoft Windows, which arises from the...

Microsoft Internet Explorer/Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-34720)

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into Windows 10 versions. A memory corruption vulnerability exists in the scripting engine implementation of Microsoft Edge/Microsoft Internet Explorer, which can be exploited by an unauthenticated, remote...

Microsoft Internet Explorer/Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-34715)

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into Windows 10 versions. Microsoft Edge/Microsoft Internet Explorer suffers from a memory corruption-wide vulnerability in the scripting engine implementation due to incorrect memory manipulation. An...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2017-34719)

Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer is implemented with a memory corruption vulnerability that can be exploited by unauthenticated, remote attackers to execute arbitrary code on the target system...

Microsoft Internet Explorer/Edge Information Disclosure Vulnerability (CNVD-2017-34445)

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into the Windows 10 version. An information disclosure vulnerability exists in Microsoft Internet Explorer/Edge. An unauthenticated, remote attacker could access sensitive information on the target system...

Microsoft IE11: use-after-free in jscript!JsErrorToString(CVE-2017-11810)

There is a use-after-free in jscript.dll library that can be exploited in IE11. jscript.dll is an old JavaScript library that was used in IE 8 and back. However, IE11 can still load it if put into IE8 compatibility mode and if there is a script tag that can only be understood by the older library...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2017-34716)

Internet Explorer is a web browser from Microsoft. An information disclosure vulnerability exists in the implementation of Microsoft Internet Explorer, which can be exploited by unauthenticated, remote attackers to gain access to sensitive information on a target system...

Microsoft Internet Explorer/Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-34717)

Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into Windows 10 versions. A memory corruption vulnerability in the scripting engine implementation of Microsoft Edge/Microsoft Internet Explorer can be exploited by an unauthenticated, remote attacker to...

CVE-2017-11855

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the curren...

CVE-2017-11855

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the curren...

CVE-2017-11858

ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows...

CVE-2017-11869

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current...