CVE-2014-4089

CVE-2014-4089 concerns memory corruption in Microsoft Internet Explorer 10 and 11 caused by loading a crafted web site, enabling remote code execution or a denial of service. Affected product: Internet Explorer 10/11; vulnerable component: IE memory handling leading to memory corruption. Impact, ...

Microsoft Internet Explorer 'CAttrArray' Objects Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer CVE-2014-4091 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

September 2014 Microsoft Patch Tuesday advance notification

Microsoft today announced a relatively light load of patches will be delivered on Patch Tuesday next week, along with some numbers that demonstrate public vulnerability disclosures continue to rise. Four security bulletins, one rated critical, are scheduled to be released next Tuesday. In what’s...

Microsoft Re-Releases Broken Security Patch MS14-045

Microsoft today re-released security bulletin MS14-045, which was pulled shortly after the August Patch Tuesday updates because a number of users reported crashes and blue screens. The patch was removed from Windows Update on Aug. 15, three days after it was released as part of Microsoft’s monthl...

CVE-2014-4052

CVE-2014-4052 affects Microsoft Internet Explorer 9 and 10. The connected sources describe a memory-corruption vulnerability exploitable via a crafted web site, enabling remote code execution or a denial of service. Open-source advisories (e.g., ZDI-14-280) specify a use-after-free in handling of...

CVE-2014-2810

Technical details for CVE-2014-2810 are not publicly provided in the connected documents. The IE memory corruption vulnerability is described, but no vendor/version/patch specifics are present here; monitor for updates.

August 2014 Microsoft Patch Tuesday Security Bulletins

Microsoft today released its monthly Patch Tuesday Security Bulletins, and the top priority is another cumulative update for Internet Explorer; this one patches 26 vulnerabilities, including one that’s been publicly reported, Microsoft said, and is likely being exploited. All of them are rated...

Microsoft Internet Explorer CVE-2014-4052 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will result in denial-of-service conditions. Internet Explorer ...

Microsoft Internet Explorer CVE-2014-2774 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will result in denial-of-service conditions. Internet Explorer ...

骑士CMS存储型等XSS

简要描述： 你们防护做的挺好，我X的十分不容易，加上漏洞影响，自评16rank/,/ 走小厂商又只有1/4rank不如给20吧 —，— 详细说明： 1 先来个 反射型xss 当开胃小菜 地址：http://demo.74cms.com/jobs/jobs-list.php?key=%c0%22;evalString.fromCharCode97,108,101,114,116,40,100,111,99,117,109,101,110,116,46,99,111,111,107,105,101,41// 影响：通杀全部浏览器 详情： 主页搜所后源码定位...

The IE vulnerability is a doubling of Flash Player easy to be attack-vulnerability warning-the black bar safety net

Recently, foreign security vendor Bromium released a 2 0 1 4 annual security report, in 2 0 1 3 to 2 0 1 4 during the year, IE browser vulnerabilities to the large number doubled. At the same time, the report also analyzed the cybercriminals most commonly used vulnerabilities to attack the...

Microsoft Internet Explorer CTreePos Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2014-2806

Microsoft Internet Explorer 11 is affected by CVE-2014-2806 (Internet Explorer Memory Corruption Vulnerability). A crafted website can allow remote attackers to execute arbitrary code or cause a denial of service via memory corruption. Public exploits exist for this vulnerability. A patch is avai...

Microsoft Internet Explorer CVE-2014-2806 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will result in denial-of-service conditions. Internet explorer ...

Microsoft Internet Explorer CVE-2014-2801 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will result in denial-of-service conditions. Internet explorer ...

Microsoft Internet Explorer CVE-2014-2797 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will result in denial-of-service conditions. Internet explorer...

H. Nomura Tiny FTPDaemon 0.52 Multiple Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/961/info Tiny FTPd is a freeware FTP server for Win9x with a Japanese interface. Version .52 and possible previous versions have unchecked buffers in the code that handles the following commands: APPE, MKD, RMD, RNFR, RNT...

Oracle Document Capture 10g ActiveX Control Buffer Overflow

No description provided by source. $Id: oracledcsubmittoexpress.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Invision Power Board 3.0.0b5 Active XSS & Path Disclosure Vulns

No description provided by source. ================================================================================ Found : brainpillow Dork : Powered By IP.Board 3.0.0 Beta 5 Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail :...