23359 matches found
CVE-2020-0674-Exploit
CVE-2020-0674 CVE-2020-0674 पुराने jscript इंजन में एक use-after-free भेद्यता है। इसे Internet Explorer में ट्रिगर किया जा सकता है। यहाँ दिया गया exploit maxpl0it द्वारा लिखा गया है, लेकिन इस भेद्यता की खोज Qihoo 360 ने की थी, जिसका उपयोग वास्तविक दुनिया में हो रहा था। यह exploit केवल calc खोलता...
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free JScript.dll में Use-After-Free के माध्यम से रिमोट कोड निष्पादन CVE-2025-30397 🧠 विवरण इस रिपॉजिटरी में JScript इंजन jscript.dll में एक Use-After-Free भेद्यता के लिए प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट शामिल है, जो Windows Server 2025...
cve-2016-0189
CVE-2016-0189 CVE-2016-0189 के लिए प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट IE11 में VBScript मेमोरी करप्शन Windows 10 IE11 पर परीक्षण किया गया। लेख http://theori.io/research/cve-2016-0189 चलाने के लिए 1. एक निर्देशिका में support/.dll या अपने लिए .cpp संकलित करें और exploit/.html डाउनलोड करें। 2. निर्देशिक...
CVE-2019-1367
0x00 पृष्ठभूमि परिचय Internet Explorer, माइक्रोसॉफ्ट द्वारा जारी एक वेब ब्राउज़र है। इसके उपयोगकर्ताओं की संख्या बहुत अधिक है। 23 सितंबर को माइक्रोसॉफ्ट ने एक सुरक्षा अद्यतन जारी किया, जिसमें IE ब्राउज़र को प्रभावित करने वाली एक रिमोट कोड निष्पादन भेद्यता को ठीक किया गया। यह भेद्यता Google खतरा...
IE11SandboxEscapes
IE11SandboxEscapes फिक्स किए गए IE11 सैंडबॉक्स एस्केप्स के लिए कुछ उदाहरण स्रोत कोड। c James Forshaw 2014 केवल सूचना प्रयोजनों के लिए। सभी फाइलें GPLv3 के अंतर्गत लाइसेंस प्राप्त हैं। अधिक जानकारी के लिए LICENSE देखें।...
Security Bulletin: Vulnerability in SSLv3 affects IBM System Storage Tape Controller 3592 Model C07 (CVE-2014-3566)
Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in IBM System Storage Tape Controller 3592 Model C07. Vulnerability Details CVE ID: CVE-2014-3566 DESCRIPTION: Product could allow a remote attack...
KB5099415: Cumulative security update for Internet Explorer: July 14, 2026
None None...
PYSEC-2026-2531 Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...
Cross-site Scripting (XSS)
Overview @asymmetric-effort/specifyjs is an A declarative TypeScript UI framework built for performance and simplicity Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderToString process. An attacker can inject malicious CSS expressions by bypassing the...
Security Bulletin: Use of Aspera products with Windows XP/IE 8
Question Security Bulletin: Use of Aspera products with Windows XP/IE 8 "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM Aspera","Component":"","Platform":"code":"PF025","label":"Platform Independent","Version":"All Versions","Edition":"","Line...
KB5094006: Cumulative security update for Internet Explorer: June 9, 2026
None None...
CVE-2026-9264
A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...
EUVD-2026-31386
A cross-site scripting XSS vulnerability in SketchUp 2026's Dynamic Components feature allows remote code execution and local file exfiltration through maliciously crafted SKP files. The vulnerability stems from improper input sanitization in the component options window, enabling attackers to...
CVE-2026-9264
CVE-2026-9264 affects SketchUp 2026 where the Dynamic Components feature fails to sanitize inputs in the component options window. The root cause is improper input sanitization, allowing a crafted SKP to run arbitrary system commands and read local files via an embedded Internet Explorer 11 brows...
Trimble SketchUp 安全漏洞
Trimble SketchUp is a 3D modeling software developed by Trimble in the United States. It is designed for architects, urban planning experts, producers, game developers, and professionals in related fields. Trimble SketchUp has a security vulnerability that stems from improper handling of dynamic...
PT-2026-42704
Name of the Vulnerable Software and Affected Versions SketchUp 2026 Description A cross-site scripting XSS issue in the Dynamic Components feature allows remote code execution and local file exfiltration via maliciously crafted SKP files. The flaw is caused by improper input sanitization in the...
Microsoft’s Retired IE Tool MSHTA Now Being Used in Fileless Malware Attacks
Despite Internet Explorer’s retirement, hackers are abusing the legacy MSHTA utility in stealthy fileless malware attacks targeting Windows users...
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life EoL and/or end-of-service EoS. Users shoul...
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product...
