86 matches found
CVE-2017-8625_Bypass_UMCI
Windows Defender Device Guard 是什么？ Windows Defender Device Guard 是一系列与企业相关的硬件和软件安全功能的组合，当它们一起配置时，将锁定设备，使其只能运行你在代码完整性策略中定义的受信任应用程序。如果应用不受信任，它就无法运行，仅此而已。配合满足基本要求的硬件，这也意味着即使攻击者设法控制了 Windows 内核，他也很难运行恶意可执行代码。配合合适的硬件，Windows Defender Device Guard 可以利用 Windows 10（在 Enterprise 和 Education 桌面 SKU 以及所有...
CVE-2025-54100
CVE-2025-54100 – PowerShell 响应解析 PoC 演示 CVE-2025-54100 如何通过恶意 HTML 解析，在 Windows PowerShell 5.1 中导致 远程代码执行（RCE） 。 什么是 CVE-2025-54100？ 漏洞类型： 当 Invoke-WebRequest 未使用 -UseBasicParsing 参数时存在命令注入风险 严重等级： CVSS 7.8（高危） 根本原因： 基于 MSHTML 的 HTML 响应解析允许脚本执行（如 ActiveXObject），并在调用者上下文中运行 受影响系统： Windows 10 / 11...
cve-2018-8389
jscript.dll - ActiveXObject BSTR - 释放后使用 漏洞 在内存被释放后引用它可能导致程序崩溃、使用意外值或执行代码。 漏洞描述 Internet Explorer 的脚本引擎处理内存中对象的方式存在一个远程代码执行漏洞。该漏洞可能以这样一种方式破坏内存，使攻击者能够在当前用户的上下文中执行任意代码。成功利用此漏洞的攻击者可以获得与当前用户相同的用户权限。如果当前用户使用管理用户权限登录，成功利用此漏洞的攻击者可以控制受影响的系统。攻击者随后可以安装程序；查看、更改或删除数据；或创建拥有完全用户权限的新帐户。 CVE ID CVE-2018-8389 供应商...
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
Summary HtmlUnit 3.8.0 are vulnerable to Remote Code Execution RCE via XSTL, when browsing the attacker’s webpage Details Vulnerability code location: org.htmlunit.activex.javascript.msxml.XSLProcessortransformorg.htmlunit.activex.javascript.msxml.XMLDOMNode The reason for the vulnerability is th...
GHSA-37VQ-HR2F-G7H7 HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
Summary HtmlUnit 3.8.0 are vulnerable to Remote Code Execution RCE via XSTL, when browsing the attacker’s webpage Details Vulnerability code location: org.htmlunit.activex.javascript.msxml.XSLProcessortransformorg.htmlunit.activex.javascript.msxml.XMLDOMNode The reason for the vulnerability is th...
7-Zip 21.07 Code Execution / Privilege Escalation
Exploit Title: 7-zip - Code Execution / Local Privilege Escalation Exploit Author: Kagan Capar Date: 2020-04-12 Vendor homepage: https://www.7-zip.org/ Software link: https://www.7-zip.org/a/7z2107-x64.msi Version: 21.07 and all versions Tested On: Windows 10 Pro x64 References:...
Exploit for Out-of-bounds Write in 7-Zip
INFORMATION I haven't posted any poc code anywhere for privil...
WinDBG and JavaScript Analysis
This blog was authored by Paul Rascagneres.IntroductionJavaScript is frequently used by malware authors to execute malicious code on Windows systems because it is powerful, natively available and rarely disabled. Our previous article on .NET analysis generated much interest relating to how to use...
Microsoft Internet Explorer Elevation of Privilege Vulnerability (CVE-2017-0154)
Original link: a Broken Browser Original author: Manuel Caballero Translation: Holic know Chong Yu 404 security lab Today we know from Internet Explorer since the birth there has been function. This feature allows the Web Developer instance of the external object, and therefore be the attacker to...
MS14-052 Microsoft Internet Explorer XMLDOM Filename Disclosure
This module will use the Microsoft XMLDOM object to enumerate a remote machine's filenames. It will try to do so against Internet Explorer 8 and Internet Explorer 9. To use it, you must supply your own list of file paths. Each file path should look like this: c:\windows\system32\calc.exe Module...
Microsoft Internet Explorer 5 NavigateAndFind() Cross-Zone Policy Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9568/info A vulnerability has been reported in Microsoft Internet Explorer. Because of this, an attacker may be able to violate cross-zone policy. It has been reported that the issue presents itself due to a failure by...
Microsoft Outlook 5.5/2000 Web Access HTML Attachment Script Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8113/info OWA contains a vulnerability that may result in attacker-supplied script code executing within the context of the mail interface when processing e-mail containing HTML message attachments. It is possible to...
Zeus Web Server 4.x Admin Interface VS_Diag.CGI Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7751/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input, it is possible for an attacker to...
Microsoft Internet Explorer 7.0 Combined JavaScript and XML Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28143/info Microsoft Internet Explorer is prone to a remote information-disclosure vulnerability because of a flaw in the interaction between JavaScript and XML processing in Internet Explorer. To exploit this issue, an...
Ultimate PHP Board <= 2.2.1 (log inj) Privilege Escalation Exploit
No description provided by source. !/usr/bin/perl -w ------------------------------------------------------------------ Ultimate PHP Board = 2.2.1 log inj Privilege Escalation Exploit ------------------------------------------------------------------ by athos - stakerathotmaildotit download on...
XOOPS Module resmanager <= 1.21 - Blind SQL Injection Exploit
No description provided by source. html head titleXOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module resmanager =...
Microsoft Internet Explorer 6.0 Shell.Application Object Script Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10652/info Microsoft Internet Explorer is reported prone to a security weakness that may permit malicious HTML documents the ability to execute script code. This script code has the ability to alter registry settings that...
Vivvo CMS <= 3.4 (index.php) Remote BLIND SQL Injection Exploit
No description provided by source. html head titleVivvo CMS = 3.4 index.php Remote BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: Vivvo CMS = 3.4 index.php Remote BLIN...
iisCart2000 Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7765/info A vulnerability has been reported for iisCart2000 that may result in an attacker uploading arbitrary files to a vulnerable server. The vulnerability exists in the upload.asp script. This will allow an attacker t...
PHP 5.4 (5.4.3) Code Execution (Win32)
No description provided by source. // Exploit Title: PHP 5.4 5.4.3 Code Execution 0day Win32 // Exploit author: 0in Maksymilian Motyl // Email: 0indotemailatgmail.com // Bug with Variant type parsing originally discovered by Condis // Tested on Windows XP SP3 fully patched Polish...