1733 matches found
Word type confusion vulnerability principle analysis of CVE-2 0 1 5-1 6 4 1-a vulnerability warning-the black bar safety net
The aforementioned word in parsing the docx document processing displacedByCustomXML attribute not customXML object for authentication, can be passed to other tags of the object to be processed, causing the type of Confusion, leading to arbitrary memory write, and ultimately through a carefully...
Microsoft Office - COM Object DLL Planting with WMALFXGFXDSP.dll (MS16-007)
Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=555 It is possible for an attacker to execute a DLL planting attack in Microsoft Office 2010 on Windows 7 x86 with a specially crafted OLE object. The attached POC docume...
Microsoft Office COM Object - WMALFXGFXDSP.dll DLL Planting (MS16-007)
Microsoft Office COM Object - WMALFXGFXDSP.dll DLL Planting MS16-007 Source: https://code.google.com/p/google-security-research/issues/detail?id=555 It is possible for an attacker to execute a DLL planting attack in Microsoft Office 2010 on Windows 7 x86 with a specially crafted OLE object. The...
Microsoft Windows - devenum.dll!DeviceMoniker::Load() Heap Corruption Buffer Underflow (MS16-007)
Microsoft Windows - devenum.dll!DeviceMoniker::Load Heap Corruption Buffer Underflow MS16-007 Source: https://code.google.com/p/google-security-research/issues/detail?id=594 Heap corruption buffer underflow in devenum.dll!DeviceMoniker::Load There exists a buffer underflow vulnerability in...
Microsoft Outlook vulnerability may allow remote code execution-vulnerability warning-the black bar safety net
! Recently, Microsoft released a series of patches to fix their products in some of the broad impact and critical Bugs, including the update of the Microsoft Office Suite version, to solve which part of the security. While security experts study found that one of the vulnerabilities, cve-2 0 1 5-...
Microsoft Office COM Object - DLL Planting with comsvcs.dll Delay Load of mqrt.dll (MS15-132)
Microsoft Office COM Object - DLL Planting with comsvcs.dll Delay Load of mqrt.dll MS15-132 Source: https://code.google.com/p/google-security-research/issues/detail?id=556 It is possible for an attacker to execute a DLL planting attack in Microsoft Office 2010 on Windows 7 x86 with a specially...
Microsoft Outlook Embedded OLE Object (MS15-131: CVE-2015-6172)
A sandbox bypass vulnerability, known as BadWinMail, exists in Microsoft Outlook. The vulnerability is due to the support provided by Outlook for two file formats that are being parsed automatically by Outlook which does not run under a sandbox and has medium integrity level. A remote attacker ca...
Microsoft Office - OLE Multiple DLL Side Loading Vulnerabilities (MS15-132/MS16-014/MS16-025/MS16-041/MS16-070) (Metasploit)
require 'zip' require 'base64' require 'msf/core' require 'rex/ole' class MetasploitModule 'Office OLE Multiple DLL Side Loading Vulnerabilities', 'Description' = %q Multiple DLL side loading vulnerabilities were found in various COM components. These issues can be exploited by loading various...
Office OLE Multiple DLL Side Loading Vulnerabilities
Multiple DLL side loading vulnerabilities were found in various COM components. These issues can be exploited by loading various these components as an embedded OLE object. When instantiating a vulnerable object Windows will try to load one or more DLLs from the current working directory. If an...
secure4.olemiss.edu XSS vulnerability
Vulnerable URL: https://secure4.olemiss.edu/ess/StatusResponseSAP.jsp?Message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...
Open-Xchange (OX) App Suite Multiple Vulnerabilities -02 (Oct 2015)
Open-Xchange OX App Suite is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
WinRAR Expired Notification Command Execution
!/usr/bin/python -w Title : WinRar Expired Notification - OLE Remote Command Execution Date : 30/09/2015 Author : R-73eN Tested on : Windows Xp SP3 with WinRAR 5.21 This exploits a vulnerability in the implementation of showing ads. When a user opens any WINRAR file sometimes A window with Expire...
WinRAR 5.21 - (Expired Notification) OLE Remote Command Execution Exploit
Exploit for windows platform in category local exploits !/usr/bin/python -w Title : WinRar Expired Notification - OLE Remote Command Execution Date : 30/09/2015 Author : R-73eN Tested on : Windows Xp SP3 with WinRAR 5.21 This exploits a vulnerability in the implementation of showing ads. When a...
WinRar 5.21 - SFX OLE Command Execution Exploit
Exploit for windows platform in category local exploits !/usr/bin/python -w Title : WinRar SFX OLE Command Execution Date : 25/09/2015 Author : R-73eN Tested on : Windows Xp SP3 with WinRAR 5.21 Triggering the Vulnerability Run this python script Right click a file and then click on add to archiv...
WinRar 5.21 - SFX OLE Command Execution
WinRar 5.21 - SFX OLE Command Execution !/usr/bin/python -w Title : WinRar SFX OLE Command Execution Date : 25/09/2015 Author : R-73eN Tested on : Windows Xp SP3 with WinRAR 5.21 Triggering the Vulnerability Run this python script Right click a file and then click on add to archive. check the...
WinRar 5.21 - SFX OLE Command Execution
!/usr/bin/python -w Title : WinRar SFX OLE Command Execution Date : 25/09/2015 Author : R-73eN Tested on : Windows Xp SP3 with WinRAR 5.21 Triggering the Vulnerability Run this python script Right click a file and then click on add to archive. check the 'Create SFX archive' box go to Advanced tab...
Microsoft Outlook RTF Embedded Object Security Bypass (CVE-2004-0503)
A security bypass vulnerability exists in Microsoft Outlook. The vulnerability is due to a lack of validation for certain OLE objects attached to RTF messages. A successful exploitation may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-locati...
IBM Security AppScan Standard <= 9.0.2 - OLE Automation Array Remote Code Execution
IBM Security AppScan Standard OLE Automation Array Remote Code Execution Author: Naser Farhadi Linkedin: http://ir.linkedin.com/pub/naser-farhadi/85/b3b/909 Date: 1 June 2015 Version: = 9.0.2 Tested on: Windows 7 Exploit Based on MS14-064 CVE-2014-6332 http://www.exploit-db.com/exploits/35229/ if...
Microsoft Windows multiple security vulnerabilities
OLE code execution, Internet Explorer multiple vulnerabilities, Schannel code execution, XML Core Services code execution, TCP/IP privilege escalation, Windows Audio Service privilege escalation, .NET Framework privilege escalation, RDP restrictions bypass, IIS restrictions bypass, IME privilege...
Microsoft HTA (HTML Application) - Remote Code Execution Vulnerability (MS14-064)
Document Title: =============== Microsoft HTA HTML Application - Remote Code Execution Vulnerability MS14-064 References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1576 Video: http://youtu.be/Vkswz7vt23M...