MS14-010 CVE-2014-0293 Technical Details and Code(I changed the web permanently)

Origin: Visit http://technet.microsoft.com/en-us/security/bulletin/ms14-010 Check "Acknowledgments" for "CVE-2014-0293". It says "Dieyu" and links to my website http://dieyu.org/ Technical Details: showModalDialog to keep script running, HTTP redirecting to target domain. Then script will run in...

ThinkSNS存储型XSS一枚

简要描述： 存储型XSS 详细说明： thinksns在微吧的应用中，允许用户发表帖子，而帖子是富文本。 所以，不可避免地涉及到富文本中xss的过滤。而问题就出来过滤的地方。 thinksns使用如下函数过滤传入的参数 function h$text, $type = 'html' // 无标签格式 $texttags = ''; //只保留链接 $linktags = ''; //只保留图片 $imagetags = ''; //只存在字体样式 $fonttags = ''; //标题摘要基本格式 $basetags = $fonttags.' '; //兼容Form格式...

IE 11 Stands Up to Pwn2Own Exploit Attempt

VANCOUVER – Successful exploits at the Pwn2Own contest get all the glitz, but the rarities are the exploits that fail. A group of four young South Korean hackers from ASRT, all of them well shy of their thirtieth birthdays, stood in proxy for Jung Hoon Lee. Lee was home fulfilling a military...

CVE-2014-0306

CVE-2014-0306 is described as a memory corruption vulnerability in Microsoft Internet Explorer 8 and 9 (remote code execution via a crafted web page). Connected sources add that this class of IE memory corruption issues is addressed by Microsoft MS14-012 (Cumulative Security Update for Internet E...

CVE-2014-0313

The CVE-2014-0313 entry corresponds to memory corruption in Microsoft Internet Explorer 10/11 triggered by a crafted web site. Connected sources confirm the affected product is Internet Explorer 10/11 and the vulnerability can allow remote code execution or memory corruption leading to denial of ...

CVE-2014-0304

Microsoft Internet Explorer 11 is affected by CVE-2014-0304 (Memory Corruption). The vulnerability allows remote code execution or denial of service via a crafted web page due to memory object access. Mitigation provided by the vendor through MS14-012 (Cumulative Security Update for Internet Expl...

CVE-2014-0298

The CVE-2014-0298 entry relates to memory corruption in Microsoft Internet Explorer (IE) 9–11 triggered by visiting a crafted website, per the NVD/NVD-derived description. Connected sources corroborate that this is a set of IE memory-corruption vulnerabilities resolved by Microsoft Security Bulle...

Microsoft Resolves IE Zero Day with Patch Tuesday Release

UPDATE: a previous version of this story mistakenly stated that Microsoft’s March patch Tuesday would be the last one providing support for Windows XP. Windows XP’s last patches will in fact be shipped with next month’s patch Tuesday release. Microsoft has finally pushed a fix for a stubborn and...

The browser cache is Vary broken

Jake, why are your blog posts always so depressing? -- Domenic Denicola @domenic Well, I wouldn't want to disappoint… TL;DR If you use "Vary" to negotiate content, the responses will fight for the same cache space. Additionally, IE ignores "max-age" and Safari is buggy. Content negotiation using...

[Responder] a LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server

Responder is a LLMNR and NBT-NS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. This tool is first an LLMNR and NBT-NS responder, it will answer to specific NBT-NS NetBIOS Name...

Slack: Reflective XSS can be triggered in IE

https://slack.com/go/2-2190974613-d56827?77d50"alert9 The following URL is vulnerable to XSS and can be reproduce in IE...

CVE2014-0 3 2 2 0Day Exploit analysis-exploit warning-the black bar safety net

Recently there was an IE 0day CVE-2 0 1 4-0 3 2 2is used to hang horse。 Although the vulnerability itself exists in IE,but in order to achieve success use,this sample also borrow a flash as an auxiliary,to break through the various protection. IE+flash combination also gives the analysis poses so...

Microsoft Ships IE 10 Zero Day Fix-It Tool

Microsoft last night released a Fix-It tool as a temporary mitigation for a zero-day vulnerability in Internet Explorer 10 being exploited by two hacker groups against the Veterans of Foreign Wars in the U.S. as well as a French aerospace manufacturer. IE 9 also contains the same use-after free...

Microsoft Mitigation Bypass Bug Bounty Winner Yang Yu

Yang Yu is no stranger to writing mitigation bypasses for Microsoft Windows products. A year ago at the CanSecWest conference in Vancouver, the 35-year-old security researcher from Beijing did an extensive presentation on bypassing Address Space Layout Randomization ASLR and Data Execution...

Microsoft Internet Explorer释放后重用远程代码执行漏洞

BUGTRAQ ID: 65551 CVECAN ID: CVE-2014-0322 Internet Explorer是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 10在实现上存在释放后重利用漏洞，攻击者可利用此漏洞修改任意地址处的内存字节，结合Flash ActionScript获取内存读写权限，读出actionscript中对象的虚表指针，从而绕过ASLR；然后使用ROOP技术绕过DEP。 0 Microsoft Internet Explorer 10 临时解决方法： 安装EMET或升级到IE 11以防恶意利用此漏洞。...

New IE Zero Day Found Targeting Military Intelligence

Attackers were able to compromise the U.S. Veterans of Foreign Wars’ website this week and serve up a previously unknown zero day exploit in Internet Explorer 10, and while motivation behind the campaign is still unclear, experts are speculating its aim was to procure military intelligence...

CVE-2014-0289

Microsoft Internet Explorer 11 is affected by CVE-2014-0289, described as memory corruption that can allow remote code execution or a memory-denial via a crafted web site. Exploit activity is indicated in public sources, and multiple advisories reference MS14-010 as the mitigating update. Connect...

CVE-2014-0273

CVE-2014-0273 relates to memory corruption in Microsoft Internet Explorer 9–11 triggered by visiting a crafted web site. The linked sources confirm IE 9–11 are affected by memory corruption vulnerabilities with remote code execution potential, and Microsoft issued a security update (MS14-010) to ...

Microsoft XML Core Services信息泄露漏洞(CVE-2014-0266)(MS14-005)

BUGTRAQ ID: 65407 CVECAN ID: CVE-2014-0266 Microsoft XML Core Services MSXML提供了一组服务，使用户可以使用JScript、VBScript和其它微软的开发工具开发基于XML的本机应用程序。 Microsoft XML Core Services在实现上存在安全漏洞，可使攻击者读取用户本地文件系统上的文件或者经过身份验证的Web域内容。当用户查看特制的Web内容时会通过IE触发MSXML，此时攻击者即可以利用此漏洞。 0 Microsoft Windows Windows Server 2012 Microsoft...

February 2014 Microsoft Patch Tuesday Security Bulletins

The expected continued respite from deploying Internet Explorer patches was apparently a mirage as Microsoft changed course from last Thursday’s advance notification and added two more bulletins to the February 2014 Patch Tuesday security updates, including the first IE rollup of 2014. IE had...