CVE-2015-6157

CVE-2015-6157 is an information-disclosure vulnerability in Microsoft Internet Explorer 11. A crafted webpage can cause memory disclosure, allowing remote attackers to read sensitive process memory. Public exploitation is noted in related NASL plugin data for MS15-124 (IE updates), and multiple a...

CVE-2015-6160

CVE-2015-6160 affects Microsoft Internet Explorer 11. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption-based DoS via a crafted web site. This is the Internet Explorer memory corruption vulnerability; Microsoft released MS15-124 as a fix. If exploiti...

Microsoft Internet Explorer CBGsound Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

HackerOne: CSRF possible when SOP Bypass/UXSS is available

Description If an attacker could extract content from https://hackerone.com, they could perform CSRF attacks due to the fact that: 1. Some pages prints the token in the HTML response edit user form at https://hackerone.com/settings/profile/edit 2. Tokens aren't bound per action 3. PATCH/DELETE ca...

Code injection

A vulnerability has been identified in SIMATIC NET CP 342-5 incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Advanced incl. SIPLUS variants All versions V3.0.44, SIMATIC NET CP 343-1 Lean incl. SIPLUS variants All versions V3.1.1, SIMATIC NET CP 343-1 Standard incl. SIPLUS variants All...

CVE-2015-8214

CVE-2015-8214 affects Siemens SIMATIC CP modules (CP 342-5, CP 343-1 variants, CP 443-1 variants, TIM 3V-IE/4R-IE, including SIPLUS) across many versions. Root cause: the access protection layer could allow unauthenticated users to perform administrative operations if network access to port 102/T...

Siemens SIMATIC Communication Processor Vulnerability (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC Communication Processor Vulnerability: Authentication Bypass Issues 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-15-335-03...

mitsubishi.simonkavanaghmotors.ie XSS vulnerability

Vulnerable URL: http://mitsubishi.simonkavanaghmotors.ie/usedcars/index.cfm?fuseaction=search=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:40 GMT Vulnerability type:| XSS Vulnerability status:...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-07548)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A memory corruption vulnerability exists in Microsoft Internet Explorer 7 through 11. This allows remote attackers to execute arbitrary code or cause a denial of service via...

CVE-2015-6086

Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."...

CVE-2015-6075

Microsoft Internet Explorer 11 is affected by a memory corruption vulnerability that allows remote code execution or denial of service via a crafted website. Descriptions in the supplied sources confirm IE11 as the vulnerable component and memory corruption as the underlying issue, with the impac...

CVE-2015-6086

Technical details about CVE-2015-6086 are not publicly provided in the supplied documents. No specific affected versions, root cause, or remediation are described here. Monitor for official updates.

Flash is too dangerous, the report said the hack attack front 1 0 vulnerabilities Flash representing 8-vulnerability warning-the black bar safety net

! Hacking tools the use of Pre 1 0 vulnerabilities in Flash accounted for 8 According to technology news site Network World reports that cyber Threat Intelligence research firm, Recorded Future issued the latest report shows that in the hacking toolEKthe use of the top 1 0 largest vulnerability,...

Microsoft Internet Explorer CVE-2015-6086 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 9, 10, and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer ...

CVE-2015-6046

CVE-2015-6046 affects Microsoft Internet Explorer 9–11. A remote attacker can trigger an information-disclosure vulnerability by luring a user to a crafted webpage, allowing access to sensitive data from the browser process memory. Connected sources confirm multiple IE-related vulnerabilities und...

Microsoft Internet Explorer CVE-2015-6046 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information disclosure vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Successful exploits will allow attackers to obtain sensitive information that may aid in further...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-05918)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists when Microsoft IE versions 7 through 11 fail to properly access objects in memory. The vulnerability...

CVE-2015-2542

Mode C: CVE-2015-2542 affects Microsoft Edge and Internet Explorer 10/11. The vulnerability is described as memory corruption triggered by a crafted web site, enabling remote code execution or a denial of service. Connected records identify affected products as Microsoft Edge/IE, with root cause ...

X (Formerly Twitter): Highly wormable clickjacking in player card

Hi, I would like to report an issue where player card is vulnerable to clickjacking in certain browsers. This may result in something similar to XSS worm and many other critical damages. Details Twitter Player Card allows a website to embed a custom playerhtml into an iframe in a tweet. There are...

WordPress Hacks Behind Spike in Neutrino EK Traffic

Unsurprisingly, a rash of compromised WordPress websites is behind this week’s surge in Neutrino Exploit Kit traffic, researchers at Zscaler said. In a report published yesterday, Zscaler said it spotted attacks against sites running older versions of the content management system, 4.2 and earlie...