mschenk

3 exploits Active since Feb 2017
CVE-2017-0037 EXPLOITDB HIGH html WORKING POC
Microsoft Edge and Internet Explorer 10-11 - Remote Code Execution via CSS Token Sequence Type Confusion
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.
CVSS 8.1
CVE-2017-0059 EXPLOITDB MEDIUM html WORKING POC
Internet Explorer 9-11 - Information Disclosure via Crafted Web Site
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0008 and CVE-2017-0009.
CVSS 4.3
EIP-2026-119187 EXPLOITDB python WORKING POC
Sync Breeze Enterprise 10.1.16 - 'POST' Remote Buffer Overflow