Mozilla Firefox Spoofing Vulnerability (CNVD-2016-00905)

Mozilla Firefox on Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A security vulnerability exists in Mozilla Firefox on Android prior to version 44.0. A remote attacker can exploit the vulnerability by spoofing the address bar with a data...

CVE-2016-1940

Mozilla Firefox before 44.0 on Android allows remote attackers to spoof the address bar via a data: URL that is mishandled during 1 shortcut opening or 2 BOOKMARK intent processing...

Microsoft Windows LNK File Shell Command Trojan

A code execution vulnerability has been reported in Windows Shell. The vulnerability is due to an error in the Windows Shell that fails to properly validate specific parameters when accessing a shortcut file. A remote attacker may exploit this vulnerability via a malicious shortcut file executing...

Cms madesimple 1.11.12 - Persistant XSS / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Author : ZwX Date : 09/02/2015 Download : http://www.cmsmadesimple.fr/telecharger-cms Vendor : http://www.cmsmadesimple.fr/ Tested on : Windows 7 +=====================+ Description : +=====================+ Stored Cross Site Scripting...

openSUSE Security Update : icedtea-web (openSUSE-2015-602)

The icedtea-web java plugin was updated to 1.6.1. Changes included : - Enabled Entry-Point attribute check - permissions sandbox and signed app and unsigned app with permissions all-permissions now run in sandbox instead of not at all. - fixed DownloadService - comments in deployment.properties n...

Yahoo! Messenger Stack Buffer Overflow Vulnerability

Yahoo! Messenger Yahoo! is a set of instant messaging tools launched by the American company Yahoo! A stack buffer overflow vulnerability exists in Yahoo! Messenger versions 11.5.0.228 and earlier, which can be exploited to cause a denial of service or execute arbitrary code via the 'shortcut' or...

[CVE-2 0 1 5-0 0 9 6]Microsoft Windows Shell SMB LNK Code Execution Exploit-vulnerability warning-the black bar safety net

require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::EXE include Msf::Exploit::FILEFORMAT include Msf::Exploit::Remote::SMB::Server::Share attraccessor :exploitdllname def initializeinfo = superupdateinfoinfo, 'Name' = 'Microsoft Windows Shell LN...

Microsoft Windows Shell SMB LNK Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Microsoft Windows Shell LNK Code Execution', 'Description' = %q This module exploits a vulnerability in the MS10-046 patch to abuse...

Microsoft Windows Shell File Format LNK Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Microsoft Windows Shell LNK Code Execution', 'Description' = %q This module exploits a vulnerability in the MS10-046 patch to abuse...

Microsoft Windows Shell SMB LNK Code Execution Exploit

This Metasploit module exploits a vulnerability in the MS10-046 patch to abuse again the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This creates an SMB resource to provide the payload and the trigger, and generates a LNK file which must be...

Microsoft windows DLL Load Arbitrary Code Execution Vulnerability

Microsoft Windows is an operating system developed by Microsoft. Microsoft Windows fails to properly parse shortcuts, allowing attackers to build malicious DLLs that are tricked into being loaded by applications and executed with application privileges...

CVE-2015-0096

CVE-2015-0096 is a Windows DLL search-order/shortcut (LNK) loading vulnerability (MS15-020 family). A crafted LNK with dynamic icon and SpecialFolderDataBlock can bypass earlier whitelisting, causing Windows to load a malicious DLL when icons are rendered (e.g., in Explorer), potentially executin...

PT-2015-4468 · Microsoft · Windows 8 +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold a...

XSS in page editor via Shortcut links

Steps to reproduce: 1. add new shortcuts with default alias like "". 2. by typing searchterms@aliasname in page editor you can trigger XSS By replacing existing shortcut with malicious one, we can easily exploit multiple users using this functionality...

XSS in page editor via Shortcut links

Steps to reproduce: 1. add new shortcuts with default alias like "". 2. by typing searchterms@aliasname in page editor you can trigger XSS By replacing existing shortcut with malicious one, we can easily exploit multiple users using this functionality...

Cat Soft Serv-U 2.5/a/b,Windows 2000/95/98/NT 4.0 Shortcut Vulnerability

No description provided by source. Cat Soft Serv-U 2.5/a/b,Windows 2000 Advanced Server/2000 Datacenter Server/2000 Professional/2000 Server/2000 Terminal Services/95/98/NT 4.0/NT Enterprise Server 4.0/NT Server 4.0/NT Terminal Server 4.0/NT Workstation 4.0 Shortcut Vulnerability source:...

Microsoft Windows Automatic LNK Shortcut File Code Execution

No description provided by source. From: http://www.ivanlef0u.tuxfamily.org/?p=411 1. Unzip the files in 'C: '. Start a DbgView or paste a KD to your VM. 2. Rename 'suckme.lnk' to 'suckme.lnk' and let the magic do the rest of shell32.dll. 3. Look at your logs...

Outlook ATTACH_BY_REF_RESOLVE File Execution

No description provided by source. $Id: ms10045outlookrefresolve.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Mozilla Firefox <= 3.0.3 Internet Shortcut Same Origin Policy Violation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31611/info Mozilla Firefox is prone to a vulnerability that allows attackers to violate the same-origin policy. This issue occurs because the application fails to properly enforce the same-origin policy when handling...

USB Malware Targeting Siemens Control Software (Update C)

Overview VirusBlokAda, an antivirus vendor based in Belarus, announcedVirusBlokAda, http://www.anti-virus.by/en/tempo.shtml, website last visited July 15, 2010. the discovery of malware that uses a zero-day vulnerability in Microsoft Windows processing of shortcut files. The malware utilizes this...