Microsoft scripting engine remote code execution vulnerability (CNVD-2017-18579)

Microsoft scripting engine is the United States Microsoft Microsoft company developed a for Microsoft Internet Explorer IE and Edge browser in the JavaScript engine. A remote code execution vulnerability exists in Microsoft scripting engine. A remote attacker can exploit this vulnerability to...

Cross-site Scripting (XSS)

Yii2 is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary web script by passing a JSON string to the application on Internet Explorer versions 6 and 7...

FLARE VM: The Windows Malware Analysis Distribution You’ve Always Needed!

As a reverse engineer on the FLARE Team I rely on a customized Virtual Machine VM to perform malware analysis. The Virtual Machine is a Windows installation with numerous tweaks and tools to aid my analysis. Unfortunately trying to maintain a custom VM like this is very laborious: tools frequentl...

Ubiquiti Networks EP-R6 / ER-X / ER-X-SFP Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Cross-Site Scripting XSS product: Ubiquiti Networks EP-R6, ER-X, ER-X-SFP vulnerable version: Firmware v1.9.1 fixed version: Firmware v1.9.1.1 CVE number: impact: Medium...

Ubiquiti Networks EP-R6 / ER-X / ER-X-SFP Cross Site Scripting Vulnerability

Ubiquiti Networks EP-R6, ER-X, and ER-X-SFP with firmware version 1.9.1 suffer from a cross site scripting vulnerability. ======================================================================= title: Cross-Site Scripting XSS product: Ubiquiti Networks EP-R6, ER-X, ER-X-SFP vulnerable version:...

Microsoft Internet Explorer - mshtml.dll Remote Code Execution (MS17-007) Exploit

Exploit for windows platform in category remote exploits Exploit Title: Microsoft Internet Explorer - 'mshtml.dll' Remote Code Execution MS17-007 Google Dork: NA Date: 24/7/2017 Exploit Author: Mohamed Hamdy - Nsecurity Vendor Homepage: https://www.microsoft.com Version: Microsoft Internet Explor...

Microsoft Internet Explorer MS17-007 mshtml.dll Remote Code Execution

Exploit Title: Microsoft Internet Explorer - 'mshtml.dll' Remote Code Execution MS17-007 Google Dork: NA Date: 24/7/2017 Exploit Author: Mohamed Hamdy - Nsecurity Vendor Homepage: https://www.microsoft.com Version: Microsoft Internet Explorer 11 Tested on: Windows 7 SP1 x86 CVE : CVE-2017-0037...

Microsoft Internet Explorer - 'mshtml.dll' Remote Code Execution (MS17-007)

.class1 float: left; column-count: 5; .class2 column-span: all; columns: 1px; table border-spacing: 0px; var baseleakedaddr = ""; function infoleak var textarea = document.getElementById"textarea"; var frame = document.createElement"iframe"; textarea.appendChildframe;...

Microsoft Internet Explorer - mshtml.dll Remote Code Execution (MS17-007)

Microsoft Internet Explorer - mshtml.dll Remote Code Execution MS17-007 .class1 float: left; column-count: 5; .class2 column-span: all; columns: 1px; table border-spacing: 0px; var baseleakedaddr = ""; function infoleak var textarea = document.getElementById"textarea"; var frame =...

HTML5 Receiver Citrix PDF Print Function is Not Working with Chrome Browser v57

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. HTML5 Receiver - Citrix PDF Printer Prints blank document in Chrome 57. IE and FireFox work fine...

Adware the series, the final: Tools section

So far in this series, we have handed you some methods to recognize and remediate adware. We used this diagram as a guideline. During this journey, we have touched upon several free tools that we used to get some insight on what type of infection we were dealing with and where the adware could be...

Microsoft Internet Explorer 11.0.9600.18617 - CMarkup::DestroySplayTree Memory Corruption Exploit

Exploit for windows platform in category dos / poc element. The bug was confirmed on IE Version 11.0.9600.18617 Update Version 11.0.40 running on Windows 7 64-bit. I was unable to reproduce it on Windows 10. PoC: ========================================== -- function go...

Microsoft Internet Explorer 11.1066.14393.0 - VBScript Arithmetic Functions Type Confusion Exploit

Exploit for windows platform in category dos / poc PvarGetArithVal; VAR arithv2 = v2-PvarGetArithVal; int resulttype = resultlookuptablev1-vartypev2-vartype; ifresulttype == 10 RaiseError...; ifresulttype == 2 ... else ifresulttype == 3 ... else ifresulttype == 4 ... v1-vartype = resulttype; wher...

Microsoft Internet Explorer 11.0.9600.18617 - CMarkup::DestroySplayTree Memory Corruption

Microsoft Internet Explorer 11.0.9600.18617 - CMarkup::DestroySplayTree Memory Corruption element. The bug was confirmed on IE Version 11.0.9600.18617 Update Version 11.0.40 running on Windows 7 64-bit. I was unable to reproduce it on Windows 10. PoC: ========================================== --...

Microsoft Internet Explorer 11 CMarkup::DestroySplayTree Memory Corruption

Microsoft IE: Memory curruption in CMarkup::DestroySplayTree CVE-2017-8594 There is a memory corruption issue in IE that can be triggered with svg element. The bug was confirmed on IE Version 11.0.9600.18617 Update Version 11.0.40 running on Windows 7 64-bit. I was unable to reproduce it on Windo...

Microsoft Internet Explorer 11.1066.14393.0 - VBScript Arithmetic Functions Type Confusion

PvarGetArithVal; VAR arithv2 = v2-PvarGetArithVal; int resulttype = resultlookuptablev1-vartypev2-vartype; ifresulttype == 10 RaiseError...; ifresulttype == 2 ... else ifresulttype == 3 ... else ifresulttype == 4 ... v1-vartype = resulttype; where the logic for VAR::PvarGetArithVal is roughly VAR...

Microsoft Internet Explorer 11.1066.14393.0 - VBScript Arithmetic Functions Type Confusion

Microsoft Internet Explorer 11.1066.14393.0 - VBScript Arithmetic Functions Type Confusion PvarGetArithVal; VAR arithv2 = v2-PvarGetArithVal; int resulttype = resultlookuptablev1-vartypev2-vartype; ifresulttype == 10 RaiseError...; ifresulttype == 2 ... else ifresulttype == 3 ... else ifresulttyp...

Microsoft Internet Explorer 11.0.9600.18617 - 'CMarkup::DestroySplayTree' Memory Corruption

element. The bug was confirmed on IE Version 11.0.9600.18617 Update Version 11.0.40 running on Windows 7 64-bit. I was unable to reproduce it on Windows 10. PoC: ========================================== -- function go setTimeout"window.location.reload",100;...

CVE-2017-3080

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure...

CVE-2017-3080

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure...