PowerShell Empire Windows HTTP Reverse Shell

PowerShell Empire is a post exploitation tool. A successful exploitation may allow execution of arbitrary code on the affected target...

Microsoft Windows Kernel Elevation of Privilege (CVE-2017-11847)

An elevation of privilege vulnerability exists in the Windows Kernel. The vulnerability is due to the way the Windows kernel handles objects in memory. A remote attacker could exploit this vulnerability by log on to the system and run a specially crafted application...

Microsoft Browser Scripting Engine Information Disclosure (CVE-2017-11791)

An information disclosure vulnerability exists in Microsoft Browsers. The vulnerability is due to the way the scripting engine improperly handles objects in memory in the browser. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...

Microsoft Word Memory Corruption (CVE-2017-11854)

A remote code execution vulnerability exists in Microsoft Office software. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Adobe Flash Player Integer Overflow (APSB17-33: CVE-2017-11213)

An integer overflow vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Flash Player Out-of-bounds Read (APSB17-33: CVE-2017-3114)

An out-of-bounds read vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-11837)

A remote code execution vulnerability exists in Microsoft browsers. The vulnerability is in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the...

Adobe Acrobat and Reader Type Confusion (APSB17-36: CVE-2017-16406)

A type confusion overflow vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to how Adobe Acrobat and Reader processes EMF files. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted EMF file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16418)

A out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted XML/XPS file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16402)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted PDF document...

Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16381)

A memory corruption vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the way of processing TIFF files embedded within XPS document. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted XPS document...

Microsoft Excel Memory Corruption (CVE-2017-11878)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Adobe Acrobat and Reader Security Bypass (APSB17-36: CVE-2017-16361)

A Security Bypass vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted FDF/XFDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Adobe Acrobat and Reader Improper Validation of Array Index (APSB17-36: CVE-2017-16410)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted Gif file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16405)

An Out-of-bounds Read vulnerability exists in Adobe Reader and Acrobat. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer. A successful attack can lead to sensitive data exposure...

Adobe Acrobat and Reader Security Bypass (APSB17-36: CVE-2017-16369)

A security bypass vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a specially crafted HTML file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted HTML file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16400)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted PDF document...

Adobe Flash Player Use After Free (APSB17-33: CVE-2017-11215)

An use after free vulnerability have been reported in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Acrobat and Reader Use After Free (APSB17-36: CVE-2017-16360)

A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16417)

A out-of-bounds write vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file. Successful...

Microsoft Edge Memory Corruption (CVE-2017-11845)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Microsoft Edge accesses to objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16397)

An Out-of-bounds read vulnerability exists in Adobe Reader. The vulnerability is due to an error in Adobe Reader while parsing a specially crafted file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16407)

An out-of-bounds write vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the computation that writes data past the end of the intended buffer that is part of EMF handling of EMRBITBLT record. An attacker can potentially leverage the vulnerability to corrupt sensitive...

Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16384)

A buffer over-read vulnerability exists in the exif processing module for a PNG file during XPS conversion. The vulnerability is due to an invalid input leads to an incorrect memory buffer location. A remote attacker may exploit this vulnerability by enticing a target user to open a specially...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36: CVE-2017-16411)

A memory access vulnerability exists in Adobe Acrobat and Reader. A remote attacker can exploit this issue by enticing a target user to open a specially crafted HTML file. Successful exploitation would expose sensitive data from the target...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16409)

A memory corruption vulnerability exists in Adobe Acrobat And Reader. The vulnerability is due to an error in the image conversion engine when processing Enhanced Metafile Format EMF private data. A remote attacker may exploit this vulnerability by using the out of bounds access for unintended...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16382)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to improper validation of embedded TIFF images in a XPS file. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted webpage or a maliciously crafted XPS...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16370)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted PDF document...

Adobe Flash Player Use After Free (APSB17-33: CVE-2017-11225)

An Use After Free vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Acrobat and Reader Use After Free (APSB17-36: CVE-2017-16398)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted PDF document...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16362)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16413)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to out-of-bounds error while accessing unintended memory in a specially crafted TIFF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted TIFF fil...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36: CVE-2017-16364)

A memory access vulnerability exists in Adobe Acrobat and Reader. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file. Successful exploitation would expose sensitive data from the target...

Adobe Flash Player Out-of-bounds Read (APSB17-33: CVE-2017-3112)

An out-of-bounds read vulnerability exists in Adobe Flash Player. The vulnerability is due to the way Adobe Flash handles objects in memory. A remote attacker can exploit this vulnerability by sending a crafted file...

Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16363)

A buffer over-read vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to a buffer over-read in the module that handles character codes. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16403)

An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to computation that reads data that is past the end of the target buffer. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted EMF file...

Adobe Acrobat and Reader Use After Free (APSB17-36: CVE-2017-16390)

A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...

Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16385)

A buffer access vulnerability exists in Adobe Reader and Acrobat. The vulnerability is is caused by a buffer access with incorrect length value in TIFF parsing during XPS conversion. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted TIFF file...

Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16395)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to a buffer access with incorrect length value in the image conversion module. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted EMF file...

Adobe Acrobat and Reader Improper Validation of Array Index (APSB17-36: CVE-2017-16391)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while calculate an array index. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16412)

An out-of-bounds read vulnerability exists in the XPS component of Adobe Acrobat. The vulnerability is due to improper handling of embedded JPEG images in an XPS document. A remote attacker could exploit this vulnerability by enticing a target user into opening a crafted XPS document...

Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16365)

A buffer over-read vulnerability exists in Adobe Acrobat and Reader. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file. Successful exploitation would expose sensitive data from the target...

Adobe Acrobat and Reader Out-of-bounds Write (APSB17-36: CVE-2017-16416)

A out-of-bounds write vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access sub-elements of an internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted...

Adobe Acrobat and Reader Buffer Over-read (APSB17-36: CVE-2017-16374)

A buffer over-read vulnerability exists in the JPEG 2000 module. The vulnerability is due to an invalid JPEG 2000 input code stream leading to an invalid memory buffer location. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

Adobe Acrobat and Reader Use After Free (APSB17-36: CVE-2017-16393)

A remote code execution vulnerability exists in Adobe Reader. The vulnerability is due to a use-after-free error in Adobe Reader while handling a specially crafted PDF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted PDF file with an...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36: CVE-2017-16375)

A memory access vulnerability exists in Adobe Acrobat and Reader. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file. Successful exploitation would expose sensitive data from the target...

Adobe Acrobat and Reader Untrusted Pointer Dereference (APSB17-36: CVE-2017-16373)

A memory access vulnerability exists in Adobe Acrobat and Reader. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file. Successful exploitation would expose sensitive data from the target...

Adobe Acrobat and Reader Buffer Access with Incorrect Length Value (APSB17-36: CVE-2017-16396)

An buffer overflow vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to a buffer access with incorrect length value in the TIFF processing module. A remote attacker could exploit this vulnerability by enticing a user to open a maliciously crafted TIFF document...

Microsoft Browser Scripting Engine Memory Corruption (CVE-2017-11846)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the conte...

Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16401)

An Out-of-bounds Read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to how the image conversion engine processes Enhanced Metafile Format EMF. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted EMF file with Adobe...