cve-2019-6453-poc

CVE-2019-6453：通过自定义 URI 协议处理程序进行参数注入，在 mIRC 7.55 上实现 RCE 我们通过 irc:// URI 协议处理程序在 mIRC 中发现了一个远程代码执行漏洞 。由于 mIRC 不使用像 -- 这样的标记来表示参数列表的结束，攻击者可以通过 irc:// 链接向 mIRC 传递参数，并从攻击者控制的 Samba 文件服务器加载自定义的 mirc.ini 来执行任意代码。请注意，ircs:// 的工作原理与此相同。 PoC 这个 calc 示例的 PoC 需要三个文件：mirc.ini 、calc.ini 和 poc.html...

mIRC-CVE-2019-6453

CVE-2019-6453: RCE su mIRC 7.55 tramite injection di argomenti attraverso gestori di protocollo URI personalizzati Link al write-up Abbiamo trovato una vulnerabilità di Esecuzione di Codice Remota in mIRC attraverso il gestore di protocollo URI irc://. Poiché mIRC non utilizza alcun tipo di sigil...

CVE-2026-33829-Writeup

CVE-2026-33829-Analisi Caso di studio di vulnerabilità: CVE-2026-33829 Coercizione NTLM nello Strumento di cattura di Windows Riepilogo esecutivo Questa analisi descrive la replica tecnica di CVE-2026-33829 , una vulnerabilità di divulgazione di informazioni presente nell'architettura applicativa...

New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks

Malicious actors are using a legitimate Rust-based injector called Freeze.rs to deploy a commodity malware called XWorm in victim environments. The novel attack chain, detected by Fortinet FortiGuard Labs on July 13, 2023, is initiated via a phishing email containing a booby-trapped PDF file. It...

Beyond File Search: A Novel Method

Beyond File Search: A Novel Method for Exploiting the "search-ms" URI Protocol Handler By Mathanraj Thangaraju and Sijo Jacob · July 26, 2023 Threat Summary In the ever-evolving landscape of cyber threats, malware authors continuously explore new avenues to exploit unsuspecting users. The Windows...

Microsoft Internet Explorer 6 - mms Protocol Handler Executable Command Line Injection

source: https://www.securityfocus.com/bid/10879/info A vulnerability has been reported to exist in Microsoft Internet Explorer that may allow remote attackers to pass arbitrary command line arguments to an application associated with the mms: URI protocol handler. Windows Media Player is the...