446 matches found
Metasploit Wrap-Up
Word and Javascript are a rare duo. Thanks to thesunRider. you too can experience the wonder of this mystical duo. The sole new metasploit module this release adds a file format attack to generate a very special document. By utilizing Javascript embedded in a Word document to trigger a chain of...
Microsoft Office Word MSHTML Remote Code Execution Exploit
This Metasploit module creates a malicious docx file that when opened in Word on a vulnerable Windows system will lead to code execution. This vulnerability exists because an attacker can craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering...
Microsoft MSHTML flaw exploited in Gmail and Instagram phishing scam
By Deeba Ahmed The attacks started in July 2021 in which threat actors exploited Microsoft MSHTML vulnerability to target overseas Iranians. This is a post from HackRead.com Read the original post: Microsoft MSHTML flaw exploited in Gmail and Instagram phishing scam...
Hackers Using Microsoft MSHTML Flaw to Spy on Targeted PCs with Malware
A new Iranian threat actor has been discovered exploiting a now-addressed critical flaw in the Microsoft Windows MSHTML platform to target Farsi-speaking victims with a previously undocumented PowerShell-based information stealer designed to harvest extensive details from infected machines. "The...
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft MSHTML engine contains an improper input validation vulnerability that allows for remote code execution vulnerability...
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution...
Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability
Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution...
Exploit for Path Traversal in Microsoft
CVE-2021-40444-POC An attempt to reproduce Microsoft MSHTML Re...
Exploit for Path Traversal in Microsoft
CVE-2021-40444-POC An attempt to reproduce Microsoft MSHTML Re...
Bug in Popular WinRAR Software Could Let Attackers Hack Your Computer
A new security weakness has been disclosed in the WinRAR trialware file archiver utility for Windows that could be abused by a remote attacker to execute arbitrary code on targeted systems, underscoring how vulnerabilities in such software could beсome a gateway for a roster of attacks. Tracked a...
Podcast: Could the Zoho Flaw Trigger SolarWinds 2.0?
A month ago, the FBI, CISA and the U.S. Coast Guard Cyber Command CGCYBER warned that state-backed advanced persistent threat APT actors are likely among those who’d been actively exploiting a critical flaw in a Zoho-owned single sign-on and password management tool since early August. At issue w...
CVE-2021-41342
Windows MSHTML Platform Remote Code Execution Vulnerability...
CVE-2021-41342
Windows MSHTML Platform Remote Code Execution Vulnerability...
Remote code execution
Windows MSHTML Platform Remote Code Execution Vulnerability...
CVE-2021-41342
Technical details for CVE-2021-41342 are not publicly available in the provided documents; the materials reference the vulnerability name but do not specify affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2021-41342 Windows MSHTML Platform Remote Code Execution Vulnerability
...
Windows MSHTML Platform Remote Code Execution Vulnerability
...
KLA12309 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service. Below is a...
Microsoft Windows MSHTML Platform 代码注入漏洞
Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected: Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit...
Security Updates for Internet Explorer (October 2021)
The Internet Explorer installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the MSHTML platform. An unauthenticated, remote attacker can exploit this to bypass authentication and execute arbitrary commands. %NASLMINLEV...