The vulnerability of the Internet Explorer browser, which allows a violator to circumvent existing access restrictions policies

The vulnerability of Internet Explorer is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing access control policies...

The vulnerability of the Windows operating system and the Internet Explorer browser allows attackers to increase their privileges.

The vulnerability of the Windows operating system and the Internet Explorer browser is related to errors in library loading. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

Microsoft Internet Explorer CFontFace Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The vulnerability relates to how...

Viscomsoft Calendar Active-X 2.0 - Multiple Crashes (PoC)

Viscomsoft Calendar Active-X 2.0 - Multiple Crashes PoC Exploit Title: Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs Date: 01-03-2016 Exploit Author: Shantanu Khandelwal Twitter: @shantanu561993 Vendor Homepage: http://www.viscomsoft.com/ Software Link:...

X (Formerly Twitter): DOMXSS in Tweetdeck

Hi, I would like to report a DOMXSS issue in TweetDeck. Details In Tweetdeck, a tweet contains info of what client app the user used to sent the tweet. The render process is vulnerable to DOMXSS. In https://ton.twimg.com/tweetdeck-web/web/dist/bundle.6f91b4e832.js, the following line is responsib...

phpmyadmin -- multiple XSS and a man-in-the-middle vulnerability

The phpMyAdmin development team reports: XSS vulnerability in SQL parser. Using a crafted SQL query, it is possible to trigger an XSS attack through the SQL query page. We consider this vulnerability to be non-critical. Multiple XSS vulnerabilities. By sending a specially crafted URL as part of t...

Shopify: xss in the all widgets of shopifyapps.com

i found xss in all widgets.shopifyapps.com/ google dork:site:widgets.shopifyapps.com the parameter "padding" is vulnerable,xss payload - %0ax:expressionalert1%0a xss does work in inetrnet explorer browsers for ie10,ie11 in compatibility mode , for ie5,ie6,ie7 for ie8,ie9 javascript is disabled, t...

Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs

Exploit for windows platform in category dos / poc Exploit Title: Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs Date: 01-03-2016 Exploit Author: Shantanu Khandelwal Twitter: @shantanu561993 Vendor Homepage: http://www.viscomsoft.com/ Software Link:...

The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code

The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...

The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code

The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...

Vulnerability of browsers Internet Explorer and Microsoft Edge, allowing hackers to replace web pages

The vulnerabilities of Internet Explorer and Microsoft Edge exist due to deficiencies in the implementation of HTTP responses. Exploiting these vulnerabilities allows a malicious actor to replace websites using a specially crafted URL...

The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code

The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...

The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Internet Explorer and Microsoft Edge are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Internet Explorer and Microsoft Edge are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code

The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...

The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.

The vulnerabilities of Internet Explorer and Microsoft Edge are caused by buffer overflows. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

The vulnerability of the Internet Explorer browser, which allows a violator to obtain confidential information

The vulnerability of the Hyperlink Object Library component in Internet Explorer is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information through a specially crafted URL in an email message or Office docume...

The vulnerability of the Internet Explorer browser, which allows a violator to trigger a service failure or execute arbitrary code

The vulnerability of the Internet Explorer browser arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption by using a specially crafted web page...

VulnCheck KEV: CVE-2011-1255

The Timed Interactive Multimedia Extensions aka HTML+TIME implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that 1 was not properly initialized or 2 is deleted,...

Gratipay: X-Content-Type Header Missing For aspen.io

The Anti-MIME-Sniffing header X-Content-Type-Options was not set to 'nosniff'. This allows older versions of Internet Explorer and Chrome to perform MIME-sniffing on the response body, potentially causing the response body to be interpreted and displayed as a content type other than the declared...