26146 matches found
Microsoft VBScript CVE-2016-3375 Remote Memory Corruption Vulnerability
Description Microsoft VBScript is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can take advantage of this vulnerability to execute arbitrary code in the context of the currently...
Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3324)
A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory...
Microsoft Internet Explorer and Edge CVE-2016-3325 Information Disclosure Vulnerability
Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in...
KLA10908 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer & Edge. For details look at KLA10868. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: don’t click a link in an email message or...
Microsoft Internet Explorer 11.0.9600.18482 - Use After Free
Microsoft Internet Explorer 11.0.9600.18482 - Use After Free body background-color:lime; font-color:red; ; / Exploit Title: Internet Explorer 11 Use After Free Date: 05/09/2016 - 11/09/2016 Exploit Author: Marcin Ressel Vendor Homepage: https://www.microsoft.com/pl-pl/ Version: 11.0.9600.18482...
Microsoft Internet Explorer 11.0.9600.18482 - Use After Free
Exploit for windows platform in category dos / poc body background-color:lime; font-color:red; ; / Exploit Title: Internet Explorer 11 Use After Free Date: 05/09/2016 - 11/09/2016 Exploit Author: Marcin Ressel Vendor Homepage: https://www.microsoft.com/pl-pl/ Version: 11.0.9600.18482 Tested on:...
Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3375; CVE-2017-11913)
A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling scripts. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory corruption in a way th...
VulnCheck KEV: CVE-2016-3351
An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer...
Microsoft Internet Explorer Elevation of Privilege (MS16-104: CVE-2016-3292)
An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...
Microsoft Edge Memory Corruption (MS2016-08: CVE-2016-3294)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could...
Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3297)
A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that executes malicious...
PT-2016-2744 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 9 through 11 Description: The issue is related to how Internet Explorer handles files with the .url extension from the Internet zone, allowing a remote attacker to bypass access restrictions using a specially crafte...
Microsoft Internet Explorer CVE-2016-3324 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. The could allow the attackers to execute arbitrary code in the context of the currently logged-in...
Microsoft Internet Explorer 11.0.9600.18482 - Use After Free
body background-color:lime; font-color:red; ; / Exploit Title: Internet Explorer 11 Use After Free Date: 05/09/2016 - 11/09/2016 Exploit Author: Marcin Ressel Vendor Homepage: https://www.microsoft.com/pl-pl/ Version: 11.0.9600.18482 Tested on: Windows 7 x64 0:014 g 13a8.9b8: Access violation -...
Explorer - Certificates or keys found, Dynamic Code Loading, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Explorer published at the 'play' market has multiple vulnerabilities...
QIWI: [contact-sys.com] XSS via Request-URI
PoC Открыть ссылку с помощью Internet Explorer https://blackfan.ru/x?r=https://contact-sys.com/xxx'-alertdocument.domain,var routes='xxx\'-alert1,!--','%2e%2e',...
August 31, 2016 — KB3176938 (OS Build 14393.105)
None None...
QIWI: [ibank.qiwi.ru] XSS via Request-URI
PoC Internet Explorer и, может быть, Edge https://blackfan.ru/x?r=https://ibank.qiwi.ru/xx'-alertdocument.domain-'xx/%252e%252e/webbanking/sessiontimeout.jsf blackfan.ru/x?r простой скрипт перенаправления, необходимый для формирования Request-URI и обхода XSS фильтра IE. HTTP Response //...
The vulnerability of the Internet Explorer browser, which allows a violator to rename files
The vulnerability of the Internet Explorer browser is related to the loading of various files in an attempt to open file:// URLs, depending on the existence of those files. Exploiting this vulnerability allows a malicious actor to number files using vectors that contain file:// URLs and HTML5...
The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code
The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page from a remote location...