MS15-116: Description of the security update for Project 2013: November 10, 2015

MS15-116: Description of the security update for Project 2013: November 10, 2015 Summary This security update resolves vulnerabilities in Microsoft Project 2013 that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these...

MS15-116: Description of the security update for Visio 2010: November 10, 2015

MS15-116: Description of the security update for Visio 2010: November 10, 2015 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, see...

SFO Websites Hacked: Airport Discloses Data Breach

The San Francisco International Airport SFO disclosed this week two of its websites had been hacked and lead to the disclosure of some users’ login credentials at both sites. The attacks occurred in March and compromised were SFOConnect.com and SFOConstruction.com, both relatively low-traffic...

BTFS: frame injection on bittorrent.com

Hi team, headers.php is injectable. you can see on IE browsers. FULL URL : https://www.bittorrent.com/scripts/site/headers.php?=1586521900793&callback=%3ciframe%20src%3d%22http%3a%2f%2fgoogle.com%2f%3f%22%3e%3c%2fiframe%3e Impact fix them...

MS02-008: XMLHTTP Control in MSXML 2.6 Can Allow Access to Local Files

For additional information about this vulnerability, click the following article numbers to view the articles in the Microsoft Knowledge Base: 317244 MS02-008: XMLHTTP Control in MSXML 4.0 Can Allow Access to Local Files318203 MS02-008: XMLHTTP Control in MSXML 3.0 Can Allow Access to Local...

An update that enables Internet Explorer in Windows Vista or in Windows Server 2008 to parse fragmented TLS/SSL handshake messages is available

An update that enables Internet Explorer in Windows Vista or in Windows Server 2008 to parse fragmented TLS/SSL handshake messages is available Warning: The retired, out-of-support Internet Explorer 11 desktop application has been permanently disabled through a Microsoft Edge update on certain...

Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update: April 2014

Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update: April 2014 Important When you install this update 2919355 from Windows Update, updates 2932046, 2937592, 2938439, 2934018, and 2959977 are included in the installation. Important This update 2919355 replaces update 2883200. You don't...

July 2016 update rollup for Windows Server 2012

July 2016 update rollup for Windows Server 2012 The July 2016 update rollup includes improvements and fixes for the Windows Server 2012 platform. We recommend that you apply this update rollup as part of your regular maintenance routines. Improvements and fixes To learn more about the non-securit...

Conflicting files in Internet Explorer favorites when Work Folders is installed in Windows 8.1

Conflicting files in Internet Explorer favorites when Work Folders is installed in Windows 8.1 This article describes a Work Folders issue in Windows 8.1. You can fix this issue by using the update in this article. Before you install this update, see the Prerequisites section. Symptoms User's...

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka “Internet Explorer Memory Corruption Vulnerability.” ! Recent assessments: ebleiweiss-r7 at September 12, 2019 6:07pm UTC reported: Wind...

CVE-2019-11702

A hyperlink using protocols associated with Internet Explorer, such as IE.HTTP:, can be used to open local files at a known location with Internet Explorer if a user approves execution when prompted. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This...

KB4541500: Windows 7 and Windows Server 2008 R2 March 2020 Security Update

The remote Windows host is missing security update 4541500 or cumulative update 4540688. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in...

Microsoft Patch Tuesday March 2020: a new record was set, SMBv3 “Wormable” RCE and updates for February goldies

SMBv3 "Wormable" RCE Without a doubt, the hottest Microsoft vulnerability in March 2020 is the "Wormable" Remote Code Execution in SMB v3 CVE-2020-0796. The most commonly used names for this vulnerability are EternalDarkness, SMBGhost and CoronaBlue. There was a strange story of how it was...

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2009-5159

Invision Power Board aka IPB or IP.Board 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment...

Design/Logic Flaw

Invision Power Board aka IPB or IP.Board 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment...

CVE-2009-5159

Invision Power Board aka IPB or IP.Board 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment...

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browser based on EdgeHTML and the Internet Explorer browser, related to memory object handling flaws, allows an attacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browser, based on EdgeHTML, and the Internet Explorer browser, is related to memory object handling flaws. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2020-0824

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'...

CVE-2020-0832

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827,...