CVE-2023-4931

Uncontrolled search path element vulnerability in Plesk Installer affects version 3.27.0.0. A local attacker could execute arbitrary code by injecting DLL files into the same folder where the application is installed, resulting in DLL hijacking in edputil.dll, samlib.dll, urlmon.dll, sspicli.dll,...

CVE-2020-24567

voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged users can write to the installation directory, which may be considered a site-specific configuratio...

Design/Logic Flaw

voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged users can write to the installation directory, which may be considered a site-specific configuratio...

CVE-2020-24567

voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged users can write to the installation directory, which may be considered a site-specific configuratio...

CVE-2020-24567

The CVE affects voidtools Everything prior to 1.4.1 Beta Nightly 2020-08-18. A local privilege-escalation exists via a Trojan horse urlmon.dll placed in the installation directory, applicable when low-privilege users can write to that directory. The root cause is a writable installation directory...

CVE-2020-24567: Undefined Security Weakness

voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged users can write to the installation directory, which may be considered a site-specific configuratio...

PT-2020-15741

Name of the Vulnerable Software and Affected Versions voidtools Everything versions prior to 1.4.1 Beta Nightly 2020-08-18 Description The issue allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. This is only relevant if low-privileged users can write to...

The vulnerability of the Internet Explorer browser’s urlmon.dll library allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Internet Explorer’s urlmon.dll library is related to errors in request processing. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information through a specially created file...

CVE-2019-0995

A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'...

Security feature bypass

A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'...

CVE-2019-0995

A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'...

CVE-2019-0995: Undefined Security Weakness

A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries, aka 'Internet Explorer Security Feature Bypass Vulnerability'...

Internet Explorer Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when urlmon.dll improperly handles certain Mark of the Web queries. The vulnerability allows Internet Explorer to bypass Mark of the Web warnings or restrictions for files downloaded or created in a specific way. In a web-based attack scenario, an...

KB4499179: Windows 10 Version 1709 and Windows Server Version 1709 May 2019 Security Update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

The remote Windows host is missing security update 4499179. It is, therefore, affected by multiple vulnerabilities : - A new subclass of speculative execution side channel vulnerabilities, known as Microarchitectural Data Sampling, exist in Windows. An attacker who successfully exploited these...

Windows x64 - Download & Execute Shellcode (358 bytes)

Windows x64 - Download & Execute Shellcode 358 bytes. Shellcode exploit for Winx86-64 platform / Title : Windows x64 Download+Execute Shellcode Author : Roziul Hasan Khan Shifat Date : 24-11-2016 size : 358 bytes Tested on : Windows 7 x64 Professional Email : [email protected] / / section .text...

Microsoft Windows NTLM automatically authenticates via SMB when following a file:// URL

Overview Software running on Microsoft Windows that utilizes HTTP requests can be forwarded to a file:// protocol on a malicious server, which causes Windows to automatically attempt authentication via SMB to the malicious server in some circumstances. The encrypted form of the user's credentials...

Microsoft Internet Explorer 5 Remote URLMON.DLL Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7419/info A vulnerability has been discovered in Microsoft Internet Explorer. Due to insufficient bounds checking performed by URLMON.DLL it may be possible for a malicious web server to trigger a buffer overflow. This...

Microsoft Internet Explorer受限站点区畸形URL拒绝服务漏洞

BUGTRAQ ID: 13798 CVECAN ID: CVE-2005-1791 Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft Internet Explorer中存在的漏洞可能导致URLMON.DLL崩溃。 起因是Internet Explorer无法处理向受限站点区中添加特制的URL。如果要导致崩溃，URL必须以数字和逗点开始（类似于IP地址），但不必以类似于IP地址结束。 Microsoft Internet Explorer 6.0 SP2 临时解决方法：...

windows/XP download and exec source

No description provided by source. ; Nice theorhetically generic url download and execute ; shellcode for Windows XP. ; ; Heck, atleast it saves you using tftp! ; ; [email protected] ; ; nasmw -s -fbin -o download.s download.asm bits 32 start: jmp short avoidnastynulls continue: pop edi ; edi...

MS Internet Explorer 7.0 Beta 2 (urlmon.dll) Denial of Service Vuln

No description provided by source. !--- Internet Explorer 7.0 Beta 2 urlmon.dll DoS Discovered by: Tom Ferris tommyatsecurity-protocolsdotcom Tested on: Windows XP SP2 Vulnerable Versions: IE 7.0.5296.0 1/31/2006 Security-Protocols.com ...