Microsoft Windows 7 SP1 x86 GDI Palette Objects Local Privilege Escalation

include include include include //From http://stackoverflow.com/a/26414236 this defines the details of the NtAllocateVirtualMemory function //which we will use to map the NULL page in user space. typedef NTSTATUSWINAPI PNtAllocateVirtualMemory HANDLE ProcessHandle, PVOID BaseAddress, ULONG...

Apple Safari Frame Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Fra...

SAP Business Objects Titan XML External Entity Injection Vulnerability

SAP BusinessObjects Germany SAP SAP company developed a provide a variety of business intelligence software, information management software, enterprise performance management solutions, regulatory, risk and compliance solutions. An XML external entity injection vulnerability exists in SAP Busine...

Microsoft Windows Kernel Local Elevation of Privilege Vulnerability (CNVD-2017-22654)

Microsoft Windows is the popular computer operating system. A security vulnerability in the Microsoft Windows kernel's handling of memory objects allows an attacker to exploit the vulnerability to submit special requests and elevate privileges...

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-14639)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle in-memory objects and has a remote code execution vulnerability in its implementation that could lead an attacker to execute arbitrary code in the current user context...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14607)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and is implemented with a remote memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code in the current user context...

Microsoft Windows Search Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows that stems from the way Windows Search handles memory objects. A remote attacker could exploit this vulnerability to execute arbitrary...

Microsoft Windows Multiple Vulnerabilities (KB4025341)

This host is missing a critical security update according to Microsoft KB4025341 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Office Remote Code Execution Vulnerability - Mac OS X (KB3212224)

This host is missing an important security update according to Microsoft KB3212224 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Not All Threats Are Created Equal

In today’s world, security teams are bombarded constantly with security events and threat information from multiple sources, making it impossible to address each threat with the same amount of urgency. Where does one even start? We know every threat should be addressed, but not all threats are...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

Microsoft Edge Memory Corruption Vulnerability

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

Internet Explorer help

None None...

Microsoft Edge Remote Code Execution (CVE-2017-8619)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Remote Code Execution (RCE) Through Deserialization

Moodle is vulnerable to remote code execution RCE attacks. The library does not properly deserialize the description of an external badge, allowing a malicious user to inject and execute PHP objects...

Jython Arbitrary Code Execution Vulnerability

Jython is an implementation of the Python programming language that runs on the Java platform. An arbitrary code execution vulnerability exists in Jython. Allows an attacker to execute arbitrary code via specially designed serialized PyFunction objects...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the use of memory after it is freed, caused by multiple masking of screen objects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Windows Kernel 'Win32k.sys' Local Information Disclosure Vulnerability (CNVD-2017-12584)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. A local information disclosure vulnerability exists in the Microsoft Windows Kernel 'Win32k.sys', which arises from a program's failure to properly handle objec...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by...

Remote Code Execution (RCE) Through YAML Deserialization

Drupal is vulnerable to remote code execution RCE attacks. The YAML parser does not safely deserialize PHP objects, allowing a malicious user to inject and execute arbitrary code...