PowerShell Empire Windows HTTP Reverse Shell

PowerShell Empire is a post exploitation tool. A successful exploitation may allow execution of arbitrary code on the affected target...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16417)

A out-of-bounds write vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file. Successful...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16405)

An Out-of-bounds Read vulnerability exists in Adobe Reader and Acrobat. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer. A successful attack can lead to sensitive data exposure...

Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16386)

A buffer over-read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to lack of bounds checking when XPS2PDF conversion engine handling specially crafted JEPG file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted XPS...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-11858)

A Memory Corruption Vulnerability exists in Microsoft browsers. The vulnerability is due to the way JavaScript engine is handling objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Microsoft Excel Memory Corruption (CVE-2017-11878)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16370)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted PDF document...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16399)

An Out-of-bounds vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the way of processing fpage files embedded within XPS document. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted XPS document...

Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16384)

A buffer over-read vulnerability exists in the exif processing module for a PNG file during XPS conversion. The vulnerability is due to an invalid input leads to an incorrect memory buffer location. A remote attacker may exploit this vulnerability by enticing a target user to open a specially...

Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16416)

A out-of-bounds write vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access sub-elements of an internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted...

Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16407)

An out-of-bounds write vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the computation that writes data past the end of the intended buffer that is part of EMF handling of EMRBITBLT record. An attacker can potentially leverage the vulnerability to corrupt sensitive...

Adobe Acrobat and Reader Use After Free (APSB17-36: CVE-2017-16360)

A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...

Adobe Acrobat and Reader Heap Overflow (APSB17-36: CVE-2017-16383)

A heap buffer overflow vulnerability exists in Adobe Reader. The vulnerability is due to an error in Adobe Reader while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36: CVE-2017-16372)

A memory access vulnerability exists in Adobe Acrobat and Reader. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file. Successful exploitation would expose sensitive data from the target...

Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16387)

An buffer over-read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to lack of bounds checking when handling specially crafted JEPG file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16382)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to improper validation of embedded TIFF images in a XPS file. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted webpage or a maliciously crafted XPS...

Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16413)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing unintended memory in a specially crafted TIFF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted TIFF fil...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36: CVE-2017-16375)

A memory access vulnerability exists in Adobe Acrobat and Reader. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file. Successful exploitation would expose sensitive data from the target...

Adobe Flash Player Integer Overflow (APSB17-33: CVE-2017-11213)

An integer overflow vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16397)

An Out-of-bounds read vulnerability exists in Adobe Reader. The vulnerability is due to an error in Adobe Reader while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16392)

A buffer access with incorrect length value vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to a buffer access with incorrect length value in the JPEG processing module. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11840)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way the scripting engine handles objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16396)

An buffer overflow vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to a buffer access with incorrect length value in the TIFF processing module. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted TIFF document...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11861)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way the scripting engine handles objects in memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16385)

A buffer access vulnerability exists in Adobe Reader and Acrobat. The vulnerability is is caused by a buffer access with incorrect length value in TIFF parsing during XPS conversion. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted TIFF file...

Microsoft Browser Scripting Engine Information Disclosure (CVE-2017-11791)

An information disclosure vulnerability exists in Microsoft Browsers. The vulnerability is due to the way the scripting engine improperly handles objects in memory in the browser. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16412)

An out-of-bounds read vulnerability exists in the XPS component of Adobe Acrobat. The vulnerability is due to improper handling of embedded JPEG images in an XPS document. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted XPS document...

Microsoft Internet Explorer Memory Corruption (CVE-2017-11856)

A remote code execution vulnerability exists in Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-11846)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the conte...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16414)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted PDF document...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36: CVE-2017-16411)

A memory access vulnerability exists in Adobe Acrobat and Reader. A remote attacker can exploit this issue by enticing a target user to open a specially crafted HTML file. Successful exploitation would expose sensitive data from the target...

Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16374)

A buffer over-read vulnerability exists in the JPEG 2000 module. The vulnerability is due to an invalid JPEG 2000 input code stream leading to an invalid memory buffer location. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Adobe Acrobat and Reader StackExhaustion (APSB17-36: CVE-2017-16419)

A stack exhaustion vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to incorrect control of the amount of recursion that can happen. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file. Successful exploitation could...

Adobe Acrobat and Reader Improper Validation of Array Index (APSB17-36: CVE-2017-16391)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while calculate an array index. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Adobe Acrobat and Reader Security Bypass (APSB17-36: CVE-2017-16366)

A Security bypass vulnerability exists in Adobe Acrobat and Reader. The vulnerability is in the way Internet Explorer handles embedded pdf files. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file...

Adobe Acrobat and Reader Buffer Overflow / Underflow (APSB17-36: CVE-2017-16368)

A stack buffer overflow vulnerability exists in Adobe Reader and Acrobat. This vulnerability is due to improper handling of unicode strings. Successful exploitation could lead to arbitrary code execution in the target user...

Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16381)

A memory corruption vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the way of processing TIFF files embedded within XPS document. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted XPS document...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16408)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted HTML file...

Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16363)

A buffer over-read vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to a buffer over-read in the module that handles character codes. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Microsoft Edge Scripting Engine Memory Corruption (CVE-2017-11873)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way that the scripting engine of Microsoft Edge handles objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16394)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted HTML document...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2017-11869)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page...

Adobe Acrobat and Reader Type Confusion (APSB17-36: CVE-2017-16406)

A type confusion overflow vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to how Adobe Acrobat and Reader processes EMF files. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted EMF file...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36: CVE-2017-16371)

A memory access vulnerability exists in Adobe Acrobat and Reader. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file. Successful exploitation would expose sensitive data from the target...

Adobe Acrobat and Reader Use After Free (APSB17-36: CVE-2017-16388)

A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...

Adobe Acrobat and Reader Security Bypass (APSB17-36: CVE-2017-16361)

A Security Bypass vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted FDF/XFDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Microsoft Windows Kernel Elevation of Privilege (CVE-2017-11847)

An elevation of privilege vulnerability exists in the Windows Kernel. The vulnerability is due to the way the Windows kernel handles objects in memory. A remote attacker could exploit this vulnerability by log on to the system and run a specially crafted application...

Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16415)

A out-of-bounds write vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access sub-elements of an internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted P...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16402)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted PDF document...

Microsoft Edge Memory Corruption (CVE-2017-11845)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge accesses to objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...