ie.peachstore.com XSS vulnerability

Vulnerable URL: https://ie.peachstore.com/en/search?query=w%27%22%3E%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22;%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

WordPress: Stored XSS in WordPress

Hi, Introduction --------------- The upload mechanism in WordPress works by the role of the user who's trying to upload something. So every role has a permission to upload certain files. For the lowest role like author can upload harmless file such as txt, png, gif, jpg, zip, with this file the...

Microsoft Office 2007 Word Information Disclosure Vulnerability

Exploit for windows platform in category local exploits MS Office Word Information Disclosure Vulnerability Vendor homepage: http://www.microsoft.com/ MS Office homepage: https://products.office.com/ MS Office Word contains an Internet Explorer IE Script execution issue through a currently well...

Depth study of the IE browser address bar content leakage flaws vulnerability bug-vulnerability warning-the black bar safety net

In this article, let's explore tool is IE reader, only the reader slightly hin state, but its users still a lot of TO is not negligence. I recently MSRC feel very comforting, since they are the things that the center of gravity moved to the Edge of the reader, plan flaws vulnerability bug, and th...

Broadcom 802.11r (FT) Reassociation Response Overflows Vulnerability

Broadcom suffers from multiple overflow vulnerabilities when handling 802.11r FT Reassociation Response. Broadcom: Multiple overflows when handling 802.11r FT Reassociation Response CVE-2017-11121 Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. Thes...

Apple setVendorIE Heap Overflow / Information Disclosure Vulnerabilities

Exploit for macOS platform in category dos / poc Apple: Heap overflow and information disclosure in "setVendorIE" when handling ioctl results CVE-2017-7110 Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile device...

Cross-Site Scripting (XSS)

craftcms/cms is vulnerable to cross-site scripting XSS attacks. The library does not assign the X-Content-Type-Option option to the nosniff header for all CP requests, allowing a malicious user to conduct cross-site scripting through IE/AJAX requests...

Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (4038806)

This host is missing a critical security update according to Microsoft KB4038806. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Internet Explorer CVE-2017-8733 Spoofing Vulnerability

Description Microsoft Internet Explorer is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Internet Explorer 9, 10 and 11 are...

Microsoft Patches Critical Windows Search Vulnerability

Microsoft patched more than two dozen remote code execution vulnerabilities today, many of them rated critical. One was a RCE bug that allowed an attacker to take complete control of a server or workstation via Windows Search. The fixes were part of Microsoft’s August Patch Tuesday update that...

Microsoft Internet Explorer CVE-2017-8625 Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. This may lead to other attacks. Internet Explorer 11 is vulnerable. Technologies...

Legal Robot: Pages don't render in old browsers like IE11

While working on another report, a security researcher discovered that a change in Legal Robot's code conversion of some code to ES6 arrow functions caused pages not to render in older browsers like IE 11. While there was no security impact, Legal Robot asked the researcher to submit a report to...

Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (KB2755801)

This host is missing a critical security update according to Microsoft KB2755801. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

imp.hosting365.ie Open Redirect vulnerability

Vulnerable URL: http://imp.hosting365.ie/horde/util/go.php?url=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

Microsoft Fixes 94 Security Issues in Massive June Update

Today Microsoft released patches to fix 94 vulnerabilities out of which 27 fix remote code execution issues which can allow an attackers to remotely take control of victim machines. This is a massive update and fixes more than double the number of vulnerabilities as compared to the last two month...

Microsoft Internet Explorer CVE-2017-8519 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 9,10,11 are vulnerable...

Windows Browser MFT Crash Bug

A Windows crash vulnerability exists in windows 7 and 8.1 on browsers Internet Explorer and Firefox. The vulnerability is due to an error in the way IE and Firefox handle Microsoft File Type lookup. A successful attack can crash windows 7 and 8.1...

CVE-2017-0064

CVE-2017-0064 is a security feature bypass in Microsoft Internet Explorer that allows bypassing Mixed Content warnings and loading insecure HTTP content from HTTPS. Several connected sources confirm Internet Explorer as the affected component and describe the bypass of mixed-content warnings (Int...

May 9, 2017—KB4019473 (OS Build 10586.916)

None None...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update G)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...