MS KB3065820: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote Windows host is missing KB3065820. It is, therefore, affected by the multiple vulnerabilities : - An unspecified vulnerability exists that allows an attacker to bypass the fix for CVE-2014-5333. CVE-2015-3096 - An unspecified memory address randomization flaw exists on Windows 7 64-bit...

Microsoft Internet Explorer CVE-2015-1750 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer Memory Corruption (MS15-056: CVE-2015-1766)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer 11 - Crash (PoC) (2)

function boom var divA = document.createElement"div"; document.body.appendChilddivA; try //divA.contentEditable = "true"; divA.outerHTML = "AAAA"; var context = divA'msGetInputContext'; catch exception...

Microsoft Internet Explorer 11 - Crash (PoC) (2)

Microsoft Internet Explorer 11 - Crash PoC 2 function boom var divA = document.createElement"div"; document.body.appendChilddivA; try //divA.contentEditable = "true"; divA.outerHTML = "AAAA"; var context = divA'msGetInputContext'; catch exception...

Mail.ru: [tanks.mail.ru] Internet Explorer XSS via Request-URI

Открыть с помощью Internet Explorer для формирования правильного запроса используется баг перенаправления, поэтому необходим сценарий "bf.am/x?r=" http://bf.am/x?r=https://tanks.mail.ru/"/%252e%252e/%252e%252e/ Результат: /%2e%2e/%2e%2e/" / ... /%2e%2e/%2e%2e/" data-title="Страница не найдена -...

Mail.ru: [mrgs.mail.ru] Internet Explorer XSS via Request-URI

Открыть с помощью Internet Explorer для формирования правильного запроса используется баг перенаправления, поэтому необходим сценарий "bf.am/x?r=" http://bf.am/x?r=https://mrgs.mail.ru/"/%252e%252e/%252e%252e/ Результат: /%2e%2e/%2e%2e/"...

Microsoft Internet Explorer VBScript Memory Corruption (MS15-053: CVE-2015-1684)

A security feature bypass vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due an error while processing regular expressions which allows a user to disclose memory contents of the current process. A remote attacker can exploit this issue to bypass the ASLR...

1 Click Extract Audio 2.3.6 - Activex Buffer Overflow Exploit

Exploit for windows platform in category local exploits 1 Click Extract Audio Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickExtractAudio.exe The vulnerability lies in the COM component used by the...

1 Click Audio Converter 2.3.6 - Activex Buffer Overflow Exploit

Exploit for windows platform in category local exploits 1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used by the...

VK.com: XSS at http://vk.com on IE using flash files

Steps + Open the below url in Internet Explorer http://vk.com/swf/photouploaderlite.swf?h=h?&onMouseOver=document.writewindow.location.hash.substr1alertdocument.domain + Just hover your mouse over the page. Minor Observations + No "X-Content-Type-Options: nosniff" header allows IE to play the fla...

1 Click Extract Audio 2.3.6 Buffer Overflow

1 Click Extract Audio Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickExtractAudio.exe The vulnerability lies in the COM component used by the product SkinCrafter.dll SkinCrafter.dll version.1.9.2.0...

1 Click Audio Converter 2.3.6 Buffer Overflow

1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used by the product SkinCrafter.dll SkinCrafter.dll version.1.9.2.0...

1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow

1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow 1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used b...

1 Click Extract Audio 2.3.6 - Activex Buffer Overflow

1 Click Extract Audio Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickExtractAudio.exe The vulnerability lies in the COM component used by the product SkinCrafter.dll SkinCrafter.dll version.1.9.2.0...

MS15-009: Security Update for Internet Explorer (3034682)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3034682. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An attacker can exploit these by convincing a user to visit a...

1 Click Audio Converter 2.3.6 - Activex Local Buffer Overflow

1 Click Audio Converter Activex Buffer Overflow Affected version=2.3.6 Vendor Homepage:http://www.dvdvideotool.com/index.htm Software Link:www.dvdvideotool.com/1ClickAudioConverter.exe The vulnerability lies in the COM component used by the product SkinCrafter.dll SkinCrafter.dll version.1.9.2.0...

Adobe Flash Time of Check Time of Use Race Condition (APSB15-09: CVE-2015-3081)

A time-of-check time-of-use race condition vulnerability has been reported in Adobe Flash. The vulnerability is due to an error in The Flash IE broker while parsing a corrupted file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file,...

The vulnerability of the Internet Explorer browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The Internet Explorer browser contains a vulnerability related to memory handling errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...

Internet Explorer 11 - Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Internet Explorer 11 - Crash PoC Google Dork: N/A Date: 19th May, 2015 Exploit Author: garage4hackers Vendor Homepage: http://garage4hackers.com/showthread.php?t=6246 Software Link: N/A Version: Tested on IE 11 Tested on: Windows 7...