1441 matches found
Windows VBScript Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...
Windows VBScript Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...
Description of the security update for the remote code execution vulnerabilities in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the remote code execution vulnerabilities in Windows Embedded POSReady 2009: March 12, 2019 Summary Remote code execution vulnerabilities exists when the Microsoft XML Core Services MSXML parser processes user input and in the way that the VBScript engine...
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: March 12, 2019
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009: March 12, 2019 Summary A remote code execution vulnerability exists in the manner in which the VBScript engine handles objects in memory. To learn more about the vulnerability, go to...
PT-2019-1650
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is caused by a buffer overflow in the VBScript mechanism of the Windows operating system. This allows a remote attacker to execute arbitrary code by using a specially crafted web...
Security Updates for Internet Explorer (March 2019)
The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge. The vulnerability cou...
Microsoft Windows VBScript Engine CVE-2019-0667 Remote Memory Corruption Vulnerability
Description Microsoft Windows VBScript Engine is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft...
Microsoft Windows VBScript Engine CVE-2019-0665 Remote Memory Corruption Vulnerability
Description Microsoft Windows VBScript Engine is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause a denial of service conditions. Internet Explorer 10 and 11 are...
PT-2019-1605
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Microsoft Windows affected versions not specified Description A remote code execution issue exists due to errors in handling objects in memory by the VBScript engine. This could allow a remote...
PT-2019-1603
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code using a special...
PT-2019-1604
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue exists due to errors in handling objects in memory by the VBScript engine. Exploitation of this issue could allow a remote attacker to execute arbitrary code using a...
PT-2019-1646
Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A security feature bypass issue exists due to improper restriction of VBScript execution under specific conditions, allowing requests that should otherwise be ignored. This could...
Microsoft Windows VBScript Engine CVE-2019-0666 Remote Memory Corruption Vulnerability
Description Microsoft Windows VBScript Engine is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft...
New backdoor malware hits Slack and Github platforms
By Waqas The cybersecurity researchers at Trend Micro have discovered A new malware strain tapped into GitHub posts and Slack channels. Dubbed Slub by researchers; the malware works by exploiting a VBScript engine vulnerability that is classified as CVE-2018-8174 patched by Microsoft last year. B...
CVE-2019-6528
PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol Gateway 3G Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway XS-MU Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway VM Versions...
CVE-2019-6528: Improper Neutralization of Input During Web Page Generation
PSI GridConnect GmbH Telecontrol Gateway and Smart Telecontrol Unit family, IEC104 Security Proxy versions Telecontrol Gateway 3G Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway XS-MU Versions 4.2.21, 5.0.27, 5.1.19, 6.0.16 and prior, and Telecontrol Gateway VM Versions...
HTML Containing Malicious VBScript Obfuscated
Certain VBScript obfuscation schemes can be used to circumvent security software. These methods could allow attackers to execute arbitrary code on the target machines...
Combing Through Brushaloader Amid Massive Detection Uptick
Nick Biasini and Edmund Brumaghin authored this blog post with contributions from Matthew Molyett. Executive Summary Over the past several months, Cisco Talos has been monitoring various malware distribution campaigns leveraging the malware loader Brushaloader to deliver malware payloads to...
The vulnerability of the VBScript mechanism in Internet Explorer arises due to errors in object handling in memory, allowing attackers to execute arbitrary code in the context of the current user.
The vulnerability of the VBScript mechanism in Internet Explorer exists due to object handling errors in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, through a specially created web page...
VBScript - MSXML Execution Policy Bypass Exploit
According to https://blogs.windows.com/msedgedev/2017/07/07/update-disabling-vbscript-internet-explorer-11/, Starting from Windows 10 Fall Creators Update, VBScript execution in IE 11 should be disabled for websites in the Internet Zone and the Restricted Sites Zone by default. However, the...