CVE-2015-0570

Stack-based buffer overflow in the SETWPSIE IOCTL implementation in wlanhddhostapd.c in the WLAN aka Wi-Fi driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to gain privileges via a crafte...

Linux kernel SET_WPS_IE IOCTL component stack buffer overflow vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A stack buffer overflow vulnerability exists in the SETWPSIE IOCTL component of the Linux kernel. A local attacker could exploit this vulnerability to affect confidentiality,...

CVE-2016-0159

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2016-0166

CVE-2016-0166 affects Internet Explorer 11 on Windows; memory corruption can enable remote code execution or memory DOS via a crafted page. Root cause: improper handling of memory objects in IE. Impact: remote code execution in the context of the current user; requires user interaction. Remediati...

Uber: Dom Based Xss

Hi. found dom xss on this subdomain eng.uber.com. you are using a vulnerable plugin prettyPhoto.. This XSS will work in Firefox,Chrome - Google and IE last version ! And this is very dangerous! POC Firefox vector http://eng.uber.com/prettyPhotoi/x,/x POC Google and IE...

CVE-2016-0108

CVE-2016-0108 affects Microsoft Internet Explorer 11 with a memory corruption vulnerability that allows remote code execution via a crafted web site. Root cause cited in CNVD CNVD-2016-01576/01577/01589 and NVD entries is improper handling of memory objects in IE11; exploitation is evidenced by a...

Microsoft Internet Explorer Memory Corruption (MS16-023: CVE-2016-0104)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory that has been deleted. A remote attacker can exploit this issue by enticing a target victim to open a specially...

Agent-VBS

An XSS Channel is an interactive communication channel between two systems which is opened by an XSS attack. At a technical level, it is a type of AJAX application which can obtain commands, send responses back and is able to talk cross-domain. 'Exploit Pack VBS Agent code + Web IE Object - Juan...

GitLab: Markdown based stored XSS (IE only)

Hello, My other report 116697 deals with any browser even through its not a direct XSS as it doesn't execute in the context of the site. But here is another type of XSS using vbscript: which affects only IE users but executes on the context of the site check the screenshot for POC...

CVE-2016-0072

Technical details for CVE-2016-0072 are not provided in the connected documents. The available sources describe IE memory corruption/remote code execution risks in general terms for IE 9–11, but do not include product/version-specific root cause, vulnerable component, impact, or remediation for t...

2 0 1 5 Microsoft Windows vulnerability report-vulnerability warning-the black bar safety net

! This article is mainly for 2 0 1 5 year Microsoft, Google, etc. the company corresponding products of the newsecuritymechanism or security feature for analysis. In fact the previous year, namely 2 0 1 4 year of report Windows exploitation in 2 0 1 4, We also mentioned a current network attack t...

Mail.ru: [api.login.icq.net] Reflected XSS

https://api.login.icq.net/auth/login?doSNSAuth=-1&f=qs&idType=OID&k=ao1-uaRbbNAqtYfG&succUrl=http://c.icq.com/webicq/iconuploader/1/redir.html&supportedIdType=SN"alertdocument.domaina="&doSNSAuth=0 Тонкость: обязательно открывать через HTTPS. Работает IE 8...

the42.ie XSS vulnerability

Vulnerable URL: http://the42.ie/search/'--x'"/ Details: Description| Value ---|--- Patched:| Yes, at 01.09.2017 Latest check for patch:| 01.09.2017 09:59 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 60202 Google Pagerank| 0 VIP website status:| No Check...

Automattic: XSS at www.woothemes.com

This XSS vulnerability can be used against IE browsers. There is an XSS filter in modern IE browsers, so to reproduce we should turn XSS filter off http://answers.microsoft.com/en-us/ie/forum/ie9-windows7/how-do-i-turn-off-cross-site-scripting-i-can-no/f3058b73-4956-e011-8dfc-68b599b31bf5?auth=1,...

ie.mt.com XSS vulnerability

Vulnerable URL: http://ie.mt.com/ie/en/home/search/AdvancedSearch.html?q=Humid...

Privilege escalation

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability."...

Microsoft Patches Six Critical Flaws with January 2016 Updates

Microsoft released a scant nine bulletins today for Patch Tuesday, but six of them are marked critical and seven can lead to remote code execution. The updates, which address 25 vulnerabilities will be the last many who run Internet Explorer 8, 9, and 10 will receive unless they elect to update t...

End of Life for Internet Explorer 8, 9 and 10

Microsoft has started the year with an announcement that, effective Jan. 12, 2016, support for all older versions of Internet Explorer IE will come to an end known as an EoL, or End of Life. The affected versions are Internet Explorer 7, 8, 9, and 10. What this means for users is that Microsoft...

Triaging the exploitability of IE/EDGE crashes

Introduction Both Internet Explorer IE and Edge have seen significant changes in order to help protect customers from security threats. This work has featured a number of mitigations that together have not only rendered classes of vulnerabilities not-exploitable, but also dramatically raised the...

On Dutch Encryption, the End of IE 8, 9, and 10 Support, and Zerodium's Latest Bounty

Mike Mimoso and Chris Brook discuss the week in news: How the Dutch are opening encryption with open arms, the end of support for IE 8, 9, and 10, and the latest bounty offered up by Zerodium. Download: newswrap01-08-16.mp3 Music by Chris Gonsalves...