GSA Bounty: Reflected XSS on the data.gov (WAF bypass+ Chrome XSS Auditor bypass+ works in all browsers)

Description Hello. I discovered Cross-Site scripting issue on the https://www.data.gov/local/ endpoint. The issue can be site-wide, and exploitable in any place, where pagination exist. The Impact and Severity I assigned the High severity, because unlike the last 263226 report that XSS was...

Error: “Cannot start apps. Please run reset receiver to resolve a lockdown conflict for ClientHostedAppsShortcuts (error 2320)”

Users access a StoreURL and launch published IE from their Client machines. Then they use published IE and connect to another StoreURL from another farm to access another application. Majority but not all users get errors while launching the application. Error: “Cannot start apps. Please run Rese...

VulnCheck KEV: CVE-2017-0037

Microsoft Edge and Internet Explorer have a type confusion vulnerability in mshtml.dll, which allows remote code execution...

VulnCheck KEV: CVE-2017-0059

Microsoft Internet Explorer allow remote attackers to obtain sensitive information from process memory via a crafted web site...

ES File Explorer Directory Traversal Vulnerability

ES File Explorer ES File Explorer is a multifunctional cell phone file, program and process manager, which supports browsing and managing files between cell phone, computer, remote and Bluetooth. A directory traversal vulnerability exists in ES File Explorer version 3.2.4.1. An attacker could...

CVE-2015-1876

Directory traversal vulnerability in ES File Explorer 3.2.4.1...

Directory traversal

Directory traversal vulnerability in ES File Explorer 3.2.4.1...

CVE-2015-1876

Directory traversal vulnerability in ES File Explorer 3.2.4.1...

CVE-2015-1876

The CVE-2015-1876 entry corresponds to a directory traversal vulnerability in ES File Explorer version 3.2.4.1. Multiple connected sources (CNVD-2017-30451; CVNVDB/NVD) confirm that the affected product is ES File Explorer and that the flaw allows traversal of the device filesystem, with potentia...

The vulnerability in the JavaScript engine of Microsoft Edge and Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability in Microsoft Edge and Internet Explorer JavaScript engines arises from an operation that goes beyond the buffer boundaries in memory memory corruption due to script execution. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the...

Vulnerability of the JavaScript kernel in Microsoft Edge and Internet Explorer browsers, allowing attackers to execute arbitrary code

The vulnerability in the Microsoft Edge JavaScript kernel is caused by an operation going beyond the buffer boundaries in memory memory corruption due to a script error. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, as a resul...

The vulnerability of object handlers in Internet Explorer’s memory allows a hacker to execute arbitrary code.

The vulnerability of object handlers in Internet Explorer’s memory is caused by an operation that goes beyond the buffer boundaries in memory violation of access control to memory objects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the curre...

Vulnerability of object handlers in the memory of Internet Explorer and Microsoft Edge browsers, allowing attackers to execute arbitrary code

The vulnerability of object handlers in the memory of Internet Explorer and Microsoft Edge arises from the execution of operations beyond the buffer boundaries in memory memory corruption. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the curre...

Vulnerability of object handlers in Microsoft Edge and Internet Explorer browsers’ memory, allowing attackers to execute arbitrary code

The vulnerability of object handlers in the memory of Microsoft Edge and Internet Explorer arises from the execution of operations beyond the buffer boundaries in memory memory corruption. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the curre...

The vulnerability in the JavaScript engine of Microsoft Edge and Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability in Microsoft Edge and Internet Explorer JavaScript engines arises from an operation that goes beyond the buffer boundaries in memory memory corruption due to script execution. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the...

Microsoft Internet Explorer Remote Code Execution Vulnerability(CVE-2017-8618)

There is a type confusion issue related to how some arithmetic operations are performed in VBScript. To illustrate, see the following simplified code of VbsVarMod static unsigned char resultlookuptable1818 = ... void VbsVarModVAR v1, VAR v2 VAR arithv1 = v1-PvarGetArithVal; VAR arithv2 =...

Microsoft Chakra JavaScript Engine Remote Code Execution Vulnerability

Microsoft Chakra JavaScript engine is a component of the JavaScript engine used in Internet Explorer and Edge Web browsers by Microsoft. A remote code execution vulnerability exists in the Microsoft Chakra JavaScript engine. A remote attacker could exploit this vulnerability to execute arbitrary...

SMA Solar Technology Sunny Explorer Information Disclosure Vulnerability

SMA Solar Technology Sunny Explorer is a photovoltaic plant management software from SMA Germany. An information disclosure vulnerability exists in SMA Solar Technology Sunny Explorer. An attacker could exploit this vulnerability to obtain information, create and save .txt files...

Microsoft Edge 38.14393.1066.0 - textarea.defaultValue Memory Disclosure

Microsoft Edge 38.14393.1066.0 - textarea.defaultValue Memory Disclosure var n = 0; function go document.addEventListener"DOMNodeRemoved", eventhandler; eventhandler; function eventhandler n++; ifn==5 return; //prevent going into an infinite recursion t.defaultValue = "aaaaaaaaaaaaaaaaaaaa";...

WebFile Explorer 1.0 - Arbitrary File Download

Exploit Title: WebFile Explorer 1.0 - Arbitrary File Download Dork: N/A Date: 09.08.2017 Vendor Homepage : http://speicher.host/ Software Link: https://codecanyon.net/item/webfile-explorer/20366192/ Demo: http://speicher.host/envato/codecanyon/demo/web-file-explorer/ Version: 1.0 Category: Webapp...