XSS on LarkinWEB & Company

XSS Vulnerability On LarkinWEB Database Development, Web Site Design Marketing and Advertising System.. Runing HTML Codes, JScript etch... XSS Vulerability URL : http://www.larkinweb.com/secure/error.asp?msg=XSS Example:...

IE Shell URI Download and Execute, POC

Hello; Code is based on http://www.securityfocus.com/archive/1/367878 POC by Jelmer message. I just added a new feature "download" and then execute application. Also I use Wscript.Shell in Javascript instead of Shell.Application. 1- copy IPADDRESSNULLSHAREDFOLDERbad.exe stealth 2- Wait for downlo...

An analysis of the 180 Solutions Trojan

An analysis of the 180 Solutions Trojan Introduction Just when I though it was save to once more to use internet explorer I received an email bringing my attention to this webpage http://216.130.188.219/ei2/installer.htm that according to him used an exploit that affected fully patched internet...

jscriptdll.txt

hi, i found a bug in jscript.dll... here is a small report on it... -------- Abstract -------- Microsoft Corp.'s Windows Script Engine within the Windows operating system OS interprets and executes script code written in scripting languages such as VBscript and JScript. Such script code can be us...

CVE-2003-0010

Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript JScript.dll on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based...

CVE-2003-0010: Undefined Security Weakness

Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript JScript.dll on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based...

iDEFENSE Security Advisory 03.19.03: Heap Overflow in Windows Script Engine

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 03.19.03: http://www.idefense.com/advisory/03.19.03.txt Heap Overflow in Windows Script Engine March 19, 2003 I. BACKGROUND Microsoft Corp.'s Windows Script Engine within the Windows operating system OS interprets and execut...

MSIE:"SaveRef" turns Zone off

TITLEMSIE:"SaveRef" turns Zone off/TITLE digest MSIE: you can execute jscript in any zone by saving the reference of "NewWindow.location.assign". content after the "exp" section is not directly related to the flaw, so skip it if you are in a hurry; testedMSIEv6CN version IEXPLORE.EXE file version...

CVE-1999-1093

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page...

CVE-1999-1093

The CVE-1999-1093 entry describes a buffer overflow in the Window.External function of the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier . The flaw allows remote attackers to execute arbitrary commands via a malicious web page . Connected sources confirm the affected componen...

CVE-1999-1093: Undefined Security Weakness

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page...

Microsoft Internet Explorer 5/6 - GetObject File Disclosure

source: https://www.securityfocus.com/bid/3767/info A flaw exists in Microsoft Internet Explorer that may allow a remote attacker to view known files on a target system when a user views web content containing a specially crafted script. The problem occurs when the 'GetObject' JScript function is...

Microsoft Internet Explorer 4 Outlook 20005.5 - MSHTML.dll Crash

Microsoft Internet Explorer 4 Outlook 20005.5 - MSHTML.dll Crash source: https://www.securityfocus.com/bid/2202/info MSHTML.DLL is the shared library for parsing HTML in Internet Explorer and related applications. It may be possible for an attacker to crash this library remotely and cause a denia...

Microsoft Internet Explorer 4 / Outlook 2000/5.5 - 'MSHTML.dll' Crash

source: https://www.securityfocus.com/bid/2202/info MSHTML.DLL is the shared library for parsing HTML in Internet Explorer and related applications. It may be possible for an attacker to crash this library remotely and cause a denial of service with special Jscript code. This bug involves Jscript...

CVE-1999-1093

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page...

Malicious Windows Script Host JScript (.js) File

This module creates a Windows Script Host WSH JScript .js file. Module Options msf use exploit/windows/fileformat/windows/scripthostjscript msf undefinedscripthostjscript show actions ...actions... msf undefinedscripthostjscript set ACTION msf undefinedscripthostjscript show options ...show and s...

MS11-009: Vulnerability in JScript and VBScript scripting engines could allow remote code execution

None None...

Security Update for Jscript 5.7 for Windows Vista for x64-based Systems (KB971961)

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...

814078: Security Update (Microsoft Jscript version 5.6, Windows 2000, Windows XP)

A security issue has been identified that could allow an attacker to run programs on a computer running Microsoft® Windows®. The attacker would first have to send you an e-mail message or entice you into visiting a malicious Web site. You can help protect your computer by installing this update...

Security Update for Jscript 5.7 for Windows Vista (KB971961)

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your system and gain control over it. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...