23359 matches found
CVE-2017-8625_Bypass_UMCI
cos'è ! Windows Defender Device Guard ! Windows Defender Device Guard è una combinazione di funzionalità di sicurezza hardware e software pensate per le imprese che, se configurate insieme, bloccano il dispositivo in modo che possa eseguire solo applicazioni attendibili che definisci nelle tue...
CVE-2020-0674-Exploit
CVE-2020-0674 CVE-2020-0674 é uma vulnerabilidade de use-after-free no mecanismo jscript legado. Pode ser acionada no Internet Explorer. O exploit aqui foi escrito por maxpl0it, mas a vulnerabilidade em si foi descoberta pela Qihoo 360 sendo usada na natureza. Este exploit simplesmente abre a...
snuck
snuck Automatic XSS filter bypass Overview snuck is an automatic tool whose goal is to significantly test a given XSS filter by specializing the injections on the basis of the reflection context. This approach adopts Selenium to drive a web browser in reproducing both the attacker and the victim...
js-driveby-download-CVE-2006-4777
js-driveby-download-CVE-2006-4777 malware lato client di sfruttamento della vulnerabilità di Internet Explorer 6.0 SP1 su Windows XP SP2. Non richiede il consenso dell'utente e non scarica alcun file. Iniezione di Shell Code nella RAM da JavaScript con IE su Windows XP. Fileless, drive-by-downloa...
IE11SandboxEscapes
IE11SandboxEscapes Einige Beispielquellcode für behobene IE11-Sandbox-Escapes. c James Forshaw 2014 Nur zu Informationszwecken. Alle Dateien sind unter GPLv3 lizenziert. Weitere Informationen finden Sie in der LICENSE-Datei...
Security Bulletin: Vulnerability in SSLv3 affects IBM System Storage Tape Controller 3592 Model C07 (CVE-2014-3566)
Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM System Storage Tape Controller 3592 Model C07. Vulnerability Details CVE ID: CVE-2014-3566 DESCRIPTION: Product could allow a remote attack...
KB5099415: Cumulative security update for Internet Explorer: July 14, 2026
None None...
PYSEC-2026-2531 Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...
Cross-site Scripting (XSS)
Overview @asymmetric-effort/specifyjs is an A declarative TypeScript UI framework built for performance and simplicity Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderToString process. An attacker can inject malicious CSS expressions by bypassing the...
Security Bulletin: Use of Aspera products with Windows XP/IE 8
Question Security Bulletin: Use of Aspera products with Windows XP/IE 8 "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM Aspera","Component":"","Platform":"code":"PF025","label":"Platform Independent","Version":"All Versions","Edition":"","Line...
KB5094006: Cumulative security update for Internet Explorer: June 9, 2026
None None...
CVE-2026-9264
A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...
EUVD-2026-31386
A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...
CVE-2026-9264
CVE-2026-9264 affects SketchUp 2026 where the Dynamic Components feature fails to sanitize inputs in the component options window. The root cause is improper input sanitization, allowing a crafted SKP to run arbitrary system commands and read local files via an embedded Internet Explorer 11 brows...
Trimble SketchUp 安全漏洞
Trimble SketchUp is a 3D modeling software developed by Trimble in the United States. It is designed for architects, urban planning experts, producers, game developers, and professionals in related fields. Trimble SketchUp has a security vulnerability that stems from improper handling of dynamic...
PT-2026-42704
Name of the Vulnerable Software and Affected Versions SketchUp 2026 Description A cross-site scripting XSS issue in the Dynamic Components feature allows remote code execution and local file exfiltration via maliciously crafted SKP files. The flaw is caused by improper input sanitization in the...
Microsoft’s Retired IE Tool MSHTA Now Being Used in Fileless Malware Attacks
Despite Internet Explorer’s retirement, hackers are abusing the legacy MSHTA utility in stealthy fileless malware attacks targeting Windows users...
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life EoL and/or end-of-service EoS. Users shoul...
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product...
