26149 matches found
Vimeo: OAuth 2 Authorization Bypass via CSRF and Cross Site Flashing
Hello Vimeo Security Team, There is a vulnerability in api.vimeo.com/oauth which allows an attacker to gain full App privilege over a Vimeo victim user account without user approval, just by having the victim open a link to the attacker webpage. Proof of Concept link :...
Microsoft's SHA-1 Deprecation Begins with Windows 10 Anniversary Update
The home stretch of Microsoft’s planned SHA-1 deprecation schedule has arrived. This summer, with the planned release of the Windows 10 Anniversary Update, users should see signs that the weak cryptographic hash function is being phased out. Microsoft said that once the anniversary update is roll...
Microsoft Internet Explorer: UAF in MSHTML!CSVGHelpers::SetAttributeStringAndPointer
No description provided by source...
Internet Explorer Information Disclosure Vulnerability（CVE-2015-6086）
No description provided by source...
May 3, 2016, update for InfoPath 2013 (KB3114946)
None None...
May 3, 2016, update for InfoPath 2013 (KB3114818)
None None...
How to Publish Windows Explorer.exe with Specific Drives, Folders, or URLs
This article describes how to publish specific drives and folders as it is not recommended to publish Explorer.exe directly. Notes: Microsoft does NOTrecommend running Explorer.exe as a published application because the published Explorer.exe application runs as a separate process with restricted...
Internet Explorer 11 MSHTML!CMarkupPointer - 释放后重用漏洞
No description provided by source...
Microsoft Internet Explorer 释放后重用漏洞(MS14-021)
No description provided by source...
The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code
The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...
The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code
The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...
The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code
The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...
The vulnerability of the Internet Explorer browser, which allows a hacker to elevate their privileges
The vulnerability of the Internet Explorer browser is related to errors during the loading of DLLs. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...
The vulnerability of the Internet Explorer browser allows a violator to detect the presence of files.
The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to determine the presence of certain files by using specially crafted JavaScript code...
PowerShell used for spreading Trojan.Laziok through Google Docs
Introduction Through our multi-flow detection capability, we recently identified malicious actors spreading Trojan.Laziok malware via Google Docs. We observed that the attackers managed to upload the payload to Google Docs in March 2016. During the brief time it was live, users accessing the...
The exception in the exception--by means of a system of exception handling exception achieve incredible exploit-vulnerability warning-the black bar safety net
Memory read, write, execute attribute is system security the most important one of the mechanisms. Usually, if you want to overwrite the data in memory, you must first ensure that the block of memory having a write attribute, if you want to execute a piece of code in memory, you must first ensure...
Zarafe.net CMS 1.0 SQL Injection
Exploit Title : Zarafe.net CMS SQL Injection Vulnerability Exploit Author : Iran Cyber Security Group ICSG Discovered By : 0x3a Vendor HomePage : www.zarrafe.net Version : 1.0 Q1 Date : 4 April, 2016 Tested On : Internet Explorer , Win 98 ----------------------------------------- SQL Injection :...
Microsoft Internet Explorer CButton 对象 UAF漏洞 任意代码执行漏洞
No description provided by source...
Microsoft Internet Explorer 11 DLL Hijacking
Abstract -------- Microsoft Internet Explorer 11 MSHTML.DLL Remote Binary Planting Vulnerability Affected Version: MSHTML.DLL 11.0.9600.18231 and probably below on Windows 7 SP1 Vendor Homepage: http://www.microsoft.com Severity: high Status: fixed CVE-ID: CVE-2016-0160 Description -----------...
Microsoft Internet Explorer 11 - MSHTML!CMarkupPointer::UnEmbed Use-After-Free
body background-color:lime; font-color:white; ; / Title: MSHTML!CMarkupPointer::UnEmbed Use After Free Author: Marcin Ressel @resselm Date: 15.04.2016 Vendor Homepage: www.microsoft.com Software Link: n/a Version: IE11 latest Tested on: Windows 10 x64 && Windows 7 x64...