full-disclosure - [FD] MS14-080 CVE-2014-6365 Code

Open Source and information security mailing list archives

Date: Wed, 14 Jan 2015 17:57:03 +0000
From: Diéyǔ <dieyu@...yu.org>
To: bugtraq@...urityfocus.com, fulldisclosure@...lists.org
Subject: [FD] MS14-080 CVE-2014-6365 Code

The attached file is exactly the code that I sent to
Microsoft Security Response Center "MSRC"
(Screenshot pictures are deleted)

Technical details were said in this post:
MS14-080 CVE-2014-6365 Technical Details Without "Nonsense"
(So I don't repeat here)

The attached file is 4124 bytes.
The attached file contains html/php/txt.
(All readable by plain text editor)

Regards,

PS

I didn't publish this in the first post,
because it has XSS vulnerability of a big name
United Nations "UN"
(Frankly they look like - sigh)
My style is realism. So here we go.

Download attachment "ieunxss-HTML_PHP_TXT.zip" of type "application/zip" (4124 bytes)

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives