Windows Attachment Manager Incorrect High Risk JAR Handling Vulnerability

The Windows Attachment Manager does not correctly handle JAR files marked as high risk when accessed via Internet Explorer 11. Scenario: The Windows Attachment Manager does not correctly handle JAR files marked as "high risk" when accessed via Internet Explorer 11. This leads to direct execution ...

WePay: [stage-go.wepay.com] XSS via Request URI

PoC Open URL in Internet Explorer. This vulnerability only works in Internet Explorer and possibly in Edge, since it is necessary to send a Request-URI without a URL Encode, which is only possible in this browser via redirect...

The vulnerabilities of Microsoft Edge and Internet Explorer involve improper handling of objects in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge and Internet Explorer is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using specially crafted content that causes memory corruption upon...

The vulnerabilities of Microsoft Edge and Internet Explorer involve improper memory management by JavaScript mechanisms when displaying content, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge and Internet Explorer relates to the improper handling of memory objects by JavaScript mechanisms when displaying content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially...

The vulnerability of the Internet Explorer browser, related to incorrect handling of objects in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Internet Explorer browser in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold versions 1511, 1607, 1703, and Windows Server 2016 is related to incorrect handling of objects in memory. Exploiting...

The vulnerabilities of Microsoft Edge and Internet Explorer involve improper memory management by JavaScript mechanisms when displaying content, allowing attackers to execute arbitrary code.

Vulnerability of browsers Internet Explorer and Microsoft Edge, where JavaScript memory-management mechanisms malfunction when displaying content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

The vulnerability of the Internet Explorer browser, related to incorrect handling of objects in memory, allows attackers to execute arbitrary code.

The vulnerability of the Internet Explorer browser is related to incorrect handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...

October 17, 2017—KB4043961 (OS Build 16299.19)

None None...

Windows/x64 - API Hooking Shellcode (117 bytes)

/ Title : Windows x64 API Hooking Shellcode Author : Roziul Hasan Khan Shifat Size : 117 bytes Date : 16/10/2017 Email : email protected Tested On : Windows 7 Ultimate x64 / / This Shellcode hooks DeteleFileW API Warning: Do no Use this Shellcode on explorer.exe Otherwise You won't be able to...

Microsoft Internet Explorer 11 (Windows 7 x86) - mshtml.dll Remote Code Execution (MS17-007)

Microsoft Internet Explorer 11 Windows 7 x86 - mshtml.dll Remote Code Execution MS17-007 .class1 float: left; column-count: 5; .class2 column-span: all; columns: 1px; table border-spacing: 0px; var ntdllBase = ""; function infoleak var textarea = document.getElementById"textarea"; var frame =...

October 10, 2017—KB4041681 (Monthly Rollup)

None None...

October 10, 2017—KB4041691 (OS Build 14393.1770)

None None...

October 10, 2017—KB4041676 (OS Build 15063.674)

None None...

October 10, 2017—KB4041693 (Monthly Rollup)

None None...

October 10, 2017—KB4041689 (OS Build 10586.1176)

None None...

October 10, 2017—KB4041678 (Security-only update)

None None...

CVE-2017-11813

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memo...

CVE-2017-11822

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how...

CVE-2017-11813

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in the context of the current user, due to how Internet Explorer handles objects in memory, aka "Internet Explorer Memo...

CVE-2017-11810

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the...