26370 matches found
Microsoft Internet Explorer 9 - MSHTML CMarkup::ReloadInCompatView Use-After-Free
Microsoft Internet Explorer 9 - MSHTML CMarkup::ReloadInCompatView Use-After-Free document.designMode = "on"; !-- Details By switching the a document's designMode property to on in a deferred script, MSIE 9 can be made to reload a web page using CMarkup::ReloadInCompatView. This method...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.
The vulnerabilities of Internet Explorer and Microsoft Edge are caused by operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web pag...
Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to obtain confidential information or perform XSS attacks
The vulnerability of the RegEx XSS-filter in Microsoft Edge and Internet Explorer exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform XSS attacks or obtain confidential information remotely...
The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to access the content of local files.
The vulnerability of browsers Internet Explorer and Microsoft Edge is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to access the content of local files remotely...
Microsoft Internet Explorer 9 IEFRAME CMarkupPointer::MoveToGap Use-After-Free
Since November I have been releasing details on all vulnerabilities I found that I have not released before. This is the 33rd entry in the series. This information is available in more detail on my blog at http://blog.skylined.nl/20161215001.html. There you can find a repro that triggered this...
Microsoft Internet Explorer 9 - IEFRAME CMarkup::RemovePointerPos Use-After-Free (MS13-055)
document.addEventListener"load", function document.documentElement.removeNodetrue; , true; document.addEventListener"DOMNodeRemoved", function document.write""; , true; !-- Time-line Sometime in November 2012: This vulnerability was found through fuzzing. 11 November 2012: This vulnerabili...
Microsoft Internet Explorer 9 - MSHTML CMarkup::ReloadInCompatView Use-After-Free
document.designMode = "on"; !-- Details By switching the a document's designMode property to on in a deferred script, MSIE 9 can be made to reload a web page using CMarkup::ReloadInCompatView. This method calls CDoc::CompatViewRefresh, which indirectly calls...
Flash Player Bug An Eavesdropper's Delight
Adobe yesterday patched a not-so-sweet 16 Flash Player vulnerabilities, including a zero day under attack. While not much is known about the targeted attacks using the Flash Player bug, or its victims, details have surfaced on another patched flaw that is a potential privacy nightmare...
Microsoft releases 12 Security Updates; Including 6 Critical Patches
For the last Patch Tuesday for this year, Microsoft has released 12 security bulletins, half of which are rated 'critical' as they give attackers remote code execution capabilities on the affected computers. The security bulletins address vulnerabilities in Microsoft's Windows, Office, Internet...
Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2016-12421)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists in Microsoft Internet Explorer versions 9 through 11. The vulnerability can be exploited by...
Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2016-12415)
Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. A memory corruption vulnerability exists in Microsoft Internet Explorer versions 9 through 1...
Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-12412)
Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. An information disclosure vulnerability exists in Microsoft Internet Explorer versions 9...
Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2016-12413)
Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. A memory corruption vulnerability exists in the scripting engine in Microsoft Internet...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2016-12416)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. An information disclosure vulnerability exists in Microsoft Internet Explorer versions 10 and 11. The vulnerability can be exploited...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2016-12417)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. An information disclosure vulnerability exists in Microsoft Internet Explorer versions 9 through 11. An attacker could exploit this...
In ie8 using ROP and Heap Spray using the bounce of the shell-vulnerability warning-the black bar safety net
This exploit program is for the Windows 7 platform on the IE8 browser. The focus of our attention is one that uses the Java network launch Protocol JNLP the plug-in, this plug-in there is overflow vulnerability. In order to achieve the use, I will use the Heaplib to construct a ROP chain in order...
Microsoft Internet Explorer and Edge Security Bypass Vulnerability
Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. A security bypass vulnerability exists in Microsoft Internet Explorer versions 10 and 11 and...
Microsoft Internet Explorer Multiple Vulnerabilities (3204059)
This host is missing a critical security update according to Microsoft Bulletin MS16-144. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Nextcloud: Stored XSS on new Calling plugin (spreed)
There's a stored xss vulnerability .... Proof Of Concept : =============== 1. Set name as an xss payload like "x. F143238 2. Invite people to single call room. 3. Xss will execute in IE. It doesn't support CSP F143237 Impact : ======== Admin user can be xssed via this method if admin uses browser...
Microsoft Patches Publicly Disclosed IE, Edge Vulnerabilities
Microsoft today patched a half-dozen critical browser vulnerabilities that have been publicly disclosed, but apparently not used in attacks as of yet. The critical Internet Explorer and Microsoft Edge bulletins are among six released today, along with six others with a severity rating of importan...