Internet Explorer Unsafe Scripting Misconfiguration

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Internet Explorer...

Autodesk IDrop ActiveX Control Heap Memory Corruption

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Autodesk IDrop ActiveX Control Heap Memory Corruption', 'Description' = %q This module exploits a heap-based memory corruption...

CVE-2009-4074

CVE-2009-4074 affects Internet Explorer 8’s XSS Filter (response-changing mechanism) enabling cross-site scripting on sites with no inherent vulnerabilities. Connected MS release MS10-002 documents a cumulative IE update to fix vulnerabilities that could allow remote code execution when viewing c...

Experts at PDC Ponder IE 9 Security

Researchers, analysts and experts weighed in on what they believe will be the security features of IE9 at the PDC Developer’s Conference. Read the full article. eWEEK...

Adobe AcroPDF.dll Denial Of Service

Adobe browser document ActiveX DoS vulnerablity File: AcroPDF.dll Affected version : 7.0.5 . Later versions are also effected Description: RegKey Safe for Script: True RegKey Safe for Init: True POC: Create a HTML file with following Code and test it on IE Test Exploit page targetFile = "C:\Progr...

CVE-2009-2510

Technical details for CVE-2009-2510 are not publicly provided in the connected documents. Please monitor for updates.

EMC ApplicationXtender (KeyWorks) ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the KeyWorks KeyHelp ActiveX Control KeyHelp.ocx 1.2.3120.0. This ActiveX Control comes bundled with EMC's Documentation ApplicationXtender 5.4. This module requires Metasploit: https://metasploit.com/download Current source:...

Rookie Academy of crack Session cookie method-vulnerability warning-the black bar safety net

The so-called session cookies, is a platform in you after a successful login, a cookie that indicates you have passed verification, but with the General cookie is different, he will not be there on your hard drive, that is to say: before you leave the browser, it will disappear, which means: the...

Security expert: do not ignore the URL vulnerability-vulnerability warning-the black bar safety net

Some time ago, the public security organs cracked a network company program theft cases, the analysis a bit, the main problem still lies in URL vulnerability. To test whether the presence of the URL vulnerabilities, the most simple method is in the Request. QueryString added to a’, as shown in th...

Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service

Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service Application: Lotus note connector for Blackberry Manager 5.0.0.11 And maybe other application that use it.. Platforms: Windows XP Professional French SP2 and SP3 crash: IE 8.0.6001.18702 IE 6.0.2900.2180 Exploitation...

Linux Kernel 2.6.30.5 - cfg80211 Remote Denial of Service

Linux Kernel 2.6.30.5 - cfg80211 Remote Denial of Service / cfg80211-remote-dos.c Linux Kernel http://jon.oberheide.org Information: http://patchwork.kernel.org/patch/41218/ These pointers can be NULL, the ismesh case isn't ever hit in the current kernel, but cmpies can be hit under certain...

CVE-2009-2655

CVE-2009-2655 describes a denial-of-service vulnerability in mshtml.dll used by Microsoft Internet Explorer 7/8 on Windows XP SP3. The issue is triggered when the JavaScript findText method is called with a crafted Unicode string in the first argument and only one additional argument (e.g., a sec...

The depth of the secret IE desktop associated with vulnerability-vulnerability warning-the black bar safety net

Taken from the X-Files,own Lite to write out Article source: http://www.smxiaoqiang.cn As is well known, windows design philosophy is convenient, when we open the IE browser, in the address bar enter“my computer”, then skip directly to“My Computer” This shows that windows has the Internet Explore...

Microsoft Visual Studio ATL COM对象远程代码执行漏洞

Bugraq ID: 35828 CVE ID：CVE-2009-2493 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft活动模版库ATL处理数据流对象实例化时ATL头存在错误，远程攻击者可以利用漏洞绕过IE等Kill-bits安全策略，并导致任意代码执行。 此漏洞只影响安装了使用Visual Studio ATL的组件和控件的系统。如果组件或控件使用ATL，不安全使用OleLoadFromStream允许任意对象实例化，可绕过相关的安全策略，如 Internet Explorer的Kill...

CVE-2009-2536

Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service memory consumption and application crash via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

[GSEC-TZO-44-2009] One bug to rule them all - Firefox, IE, Safari,Opera, Chrome,Seamonkey,iPhone,iPod,Wii,PS3....

One bug to rule them all IE5,IE6,IE7,IE8,Netscape,Firefox,Safari,Opera,Konqueror, Seamonkey,Wii,PS3,iPhone,iPod,Nokia,Siemens.... and more. Don't wet your pants - it's DoS only Release mode: Tried hard to coordinate - gave up Reference : GSEC-TZO-26-2009 - One bug to rule them all WWW :...

Multiple Web Browsers Denial of Service Exploit (1 bug to rule them all)

Exploit for multiple platform in category dos / poc ======================================================================== Multiple Web Browsers Denial of Service Exploit 1 bug to rule them all ======================================================================== One bug to rule them all...

Microsoft Plugs Critical Windows, IE Vulnerabilities

Microsoft today released six bulletins with fixes for at least nine documented security vulnerabilities in a range of products that put users at risk of malicious hacker attacks. At least two of the vulnerabilities are currently being attacked in the wild so it’s imperative that Windows users and...

绿坝远程缓冲区溢出漏洞

No description provided by source. Green Dam remote buffer overflow exploit "Green Dam" is a software used for monitoring and anti-pornography, popularizing by Chinese goverment. After July 1st, it will be forced to install on all new Chinese PCs. Now it already has 50 million copies in China. In...

Green Dam 3.17 (Windows XP SP2) - 'URL' Remote Buffer Overflow

Green Dam remote buffer overflow exploit "Green Dam" is a software used for monitoring and anti-pornography, popularizing by Chinese goverment. After July 1st, it will be forced to install on all new Chinese PCs. Now it already has 50 million copies in China. In order to monitor the URL that user...