7405 matches found
Windows COM Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows fails to properly validate input before loading type libraries. An attacker could use this vulnerability to elevate their privilege level. To exploit this vulnerability an attacker would first need to have access to the local system and...
May 9, 2017—KB4019474 (OS Build 10240.17394)
None None...
Windows COM Elevation of Privilege Vulnerability
An elevation of privilege exists in Windows COM Aggregate Marshaler. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability...
Microsoft Windows COM Elevation of Privilege (CVE-2017-0213)
An elevation of privilege exists in Windows COM Aggregate Marshaler. The vulnerability is due to improper handling of certain objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges...
KLA11009 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...
KB4019472: Windows 10 Version 1607 and Windows Server 2016 May 2017 Cumulative Update
The remote Windows host is missing security update KB4019472. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists in Internet Explorer due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a...
stm-stm.france24.com XSS vulnerability
Vulnerable URL: http://stm-stm.france24.com/prixdecouvertesrfi/2012/formulairev5/index.php?lang="'--! Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 21:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...
fuckedhard18.com XSS vulnerability
Vulnerable URL: http://fuckedhard18.com/tour2/?nats="MTQuMjYuMTIuMTIuNzQuMC4wLjAuMA Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 203417 VIP website status:| No Check fuckedhard18.com SSL connection:| Grade: F...
plays411.com XSS vulnerability
Vulnerable URL: https://www.plays411.com/newsite/castcrew/castcrewphoto.asp?photo=2079.1861.jpg%22--!%3E%3CSvg/Onload=confirm%27OPENBUGBOUNTY%27%3E%22=Kenneth%20P.=Lombino Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...
10and9.com XSS vulnerability
Vulnerable URL: http://www.10and9.com/url.php?url=%22/%3E%3CsvG/onLoad=alert%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7474913 VIP website status:| No Check 10and9.com SSL connection...
2600.com XSS vulnerability
Vulnerable URL: http://www.2600.com/phones/newindex.khtml/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 573873 VIP website status:| No Check 2600.com SSL connection:| Grade: A...
aoserver4.com XSS vulnerability
Vulnerable URL: http://aoserver4.com/webview/index.php?name=" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:53 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7414081 VIP website status:| No Check...
pornotube20.com XSS vulnerability
Open Bug Bounty ID: OBB-229991 Description| Value ---|--- Affected Website:| pornotube20.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
house178.com XSS vulnerability
Open Bug Bounty ID: OBB-229379 Description| Value ---|--- Affected Website:| house178.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mrc07.com XSS vulnerability
Vulnerable URL: http://www.mrc07.com/recruiting/login.php?destination=test%22%27--!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13671240...
Exploiting .NET Managed DCOM
Posted by James Forshaw, Project Zero One of the more interesting classes of security vulnerabilities are those affecting interoperability technology. This is because these vulnerabilities typically affect any application using the technology, regardless of what the application actually does. Als...
McAfee VirusScan Enterprise Denial of Service Vulnerability
McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A security vulnerability exists in Scriptscan COM Object in McAfee...
cafe24.com XSS vulnerability
Vulnerable URL: http://www.cafe24.com/?controller=domainsearch=hangul="'--!search= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2710 VIP website status:| Yes Check cafe24.com SSL...
Memory corruption
A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link...
CVE-2016-8030
A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers to create a Denial of Service on the active Internet Explorer tab via a crafted HTML link...