26146 matches found
Airbnb: [airbnb.com] XSS via Cookie flash
By corrupting the value of a cookie on the airbnb.com domain, bobrov was able to execute an XSS payload. Because cookies cannot be set cross-domain, this did require another vulnerability to be exploitable. Furthermore, because of CSP, this was only exploitable in Internet Explorer 11. The issue...
Airbnb: [m.airbnb.com] CRLF Injection
By using a URL-escaped character sequence, bobrov was able to inject HTTP headers into the responses of some redirects on the m.airbnb.com domain. This allowed them to perform actions such as setting cookies for the airbnb.com domain. This primarily affected Internet Explorer, and was not...
Internet Explorer Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain. In a web-based attack scenario, an attacker could host a website that is us...
January 10, 2017—KB3213986 (OS Build 14393.693)
None None...
January 10, 2017—KB3213986 (OS Build 14393.693)
None None...
KLA10937 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10936. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...
bom.gov.au XSS vulnerability
Vulnerable URL: http://www.bom.gov.au/water/groundwater/explorer/simple-location.php?loc=WOODENBONG'"--! Details: Description| Value ---|--- Patched:| Yes, at 15.02.2017 Latest check for patch:| 15.02.2017 23:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 27...
MS15-088 Description of the security update for Windows, Internet Explorer, and Office: August 11, 2015
MS15-088 Description of the security update for Windows, Internet Explorer, and Office: August 11, 2015 Summary This security update helps resolve an information disclosure vulnerability in Windows, Internet Explorer, and Microsoft Office. To exploit the vulnerability, an attacker would first hav...
FIX: Visual Studio 2010 crashes when you try to open a build report in Build Explorer
FIX: Visual Studio 2010 crashes when you try to open a build report in Build Explorer Symptoms Consider the following scenario: You connect to a Microsoft Team Foundation Server TFS 2008 server in Visual Studio 2010 Service Pack 1 SP1. You double-click a build in Build Explorer to try to open a...
Microsoft Internet Explorer jscript9 - JavaScriptStackWalker Memory Corruption (MS15-056)
Source: http://blog.skylined.nl/20161206001.html Synopsis A specially crafted web-page can trigger a memory corruption vulnerability in Microsoft Internet Explorer 9. A pointer set up to point to certain data on the stack can be used after that data has been removed from the stack. This results i...
Cross-Site Request Forgery (CSRF)
Jupyter notebook is vulnerable to cross-site request forgery CSRF attacks. It does not properly check the CSRF token and set authorization header. Attackers could create untitled files and start kernels no remote execution or modification of existing files for users of certain browsers Firefox,...
helpdesk.explorer-software.com XSS vulnerability
Vulnerable URL: https://helpdesk.explorer-software.com/Customers/TCMSHelp/default.htm?turl=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...
Vulnerabilities of browsers Internet Explorer and Microsoft Edge, allowing a perpetrator to trigger a service failure or execute arbitrary code
The vulnerability of The Chakra JavaScript extension in browsers Internet Explorer and Microsoft Edge arises from operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruptio...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of Internet Explorer and Microsoft Edge are caused by operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web pag...
Based on the Chakra JIT-CFG to bypass the technology-vulnerability warning-the black bar safety net
In this article, we will to introduce the reader in to attack Internet Explorer and the Edge browser can be used to bypass Microsoft's control flow protection of the CFG of the method. Our previous proof-of-concept nature of the exploit code is covered by the object's function pointers to achieve...
Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to circumvent existing access restrictions policies
The vulnerabilities of Microsoft Edge and Internet Explorer are caused by an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to bypass existing access restrictions by using a specially crafted website...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of Internet Explorer and Microsoft Edge are caused by operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web pag...
Microsoft Internet Explorer 11 - MSHTML CPasteCommand::ConvertBitmaptoPng Heap Buffer Overflow (MS14-056)
Microsoft Internet Explorer 11 - MSHTML CPasteCommand::ConvertBitmaptoPng Heap Buffer Overflow MS14-056 Security Settings - Choose a zone - Scripting should prevent websites from programmatically copy/pasting an image. Disabling execution of scripts on web-pages altogether will have the same...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of Internet Explorer and Microsoft Edge are caused by operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web pag...
Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to circumvent existing access restrictions policies
The vulnerabilities of Microsoft Edge and Internet Explorer are caused by an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to bypass existing access restrictions by using a specially crafted website...