Security feature bypass

A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mark of the Web Tagging MOTW, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11...

CVE-2018-8113

CVE-2018-8113 is a security feature bypass affecting Internet Explorer 11, described as bypassing Mark of the Web (MOTW) tagging. The connected records (NVD, CNVD, CVE lists) confirm the same vulnerability description and scope, with no explicit exploit details or in-the-wild activity provided. T...

CVE-2018-8113: Undefined Security Weakness

A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mark of the Web Tagging MOTW, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11...

Internet Explorer Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mark of the Web Tagging MOTW. Failing to set the MOTW means that a large number of Microsoft security technologies are bypassed. In a web-based attack scenario, an attacker could host a malicious website...

KLA11204 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities possibly to cause denial of service or spoof user interface. Below is a complete list of vulnerabilities: 1. Incorrect processing of AppMenifests can be exploited remotely to perfo...

Immunity Canvas: OFFICE_WSDL

Name| officewsdl ---|--- CVE| CVE-2017-8759, CVE-2017-8570 Exploit Pack| CANVAS Description| Microsoft Office Moniker/WSDL C Injection Notes| CVE Name: CVE-2017-8759, CVE-2017-8570 VENDOR: https://office.com Notes: Send the resulting document to someone and have them open it. If the target is...

CVE-2015-6784

The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...

Design/Logic Flaw

The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...

CVE-2015-6784

The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...

CVE-2015-6784

Removed by vendor...

CVE-2015-6784

CVE-2015-6784 affects Google Chrome up to 47.0.2526.73: the page serializer mishandles Mark of the Web comments for URLs containing "--", potentially allowing HTML injection via a crafted URL. The issue was fixed in Chrome 47.0.2526.73 (stable release); users should upgrade to the fixed version.

CVE-2015-6784

The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web MOTW comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring...

motw

This plugin will specify whether the page is compliant against the MOTW standard. The standard is explained in: http://msdn2.microsoft.com/en-us/library/ms537628.aspx This plugin tests if the length of the URL specified by "XYZW" is lower, equal or greater than the length of the URL; and also...

[Fwd: RE: XSS via IE MOTW feature. [sd]]

Hello MustLive / 3APA3A, I read your Vulnerabilities digest reported to BT today. Last year I noticed issue 3 during an assessment also. I've contacted MS during that time see below. They replied with: -- Hi David Thank you for submitting your email regarding XSS via IE MOTW feature. We have...