6 matches found
cve-2019-6453-poc
CVE-2019-6453: RCE en mIRC 7.55 mediante inyección de argumentos a través de manejadores de protocolo URI personalizados Encontramos una vulnerabilidad de ejecución remota de código en mIRC a través del manejador de protocolo URI irc://. Debido a que mIRC no usa ningún tipo de sigilo como -- para...
mIRC-CVE-2019-6453
CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers Link to the write-up We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument...
CVE-2026-33829-Writeup
CVE-2026-33829-Writeup Estudio de caso de vulnerabilidad: CVE-2026-33829 Coerción NTLM en la Herramienta Recortes de Windows Resumen ejecutivo Este informe detalla la reproducción técnica de CVE-2026-33829 , una vulnerabilidad de divulgación de información en el marco de la moderna aplicación...
New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks
Malicious actors are using a legitimate Rust-based injector called Freeze.rs to deploy a commodity malware called XWorm in victim environments. The novel attack chain, detected by Fortinet FortiGuard Labs on July 13, 2023, is initiated via a phishing email containing a booby-trapped PDF file. It...
Beyond File Search: A Novel Method
Beyond File Search: A Novel Method for Exploiting the "search-ms" URI Protocol Handler By Mathanraj Thangaraju and Sijo Jacob · July 26, 2023 Threat Summary In the ever-evolving landscape of cyber threats, malware authors continuously explore new avenues to exploit unsuspecting users. The Windows...
Microsoft Internet Explorer 6 - mms Protocol Handler Executable Command Line Injection
source: https://www.securityfocus.com/bid/10879/info A vulnerability has been reported to exist in Microsoft Internet Explorer that may allow remote attackers to pass arbitrary command line arguments to an application associated with the mms: URI protocol handler. Windows Media Player is the...