CVE-2021-40444

Vulnérabilité d'exécution de code à distance dans MSHTML de Microsoft CVE-2021-40444 Comment désactiver les contrôles ActiveX sur un système individuel ? 1. Pour désactiver l'installation des contrôles ActiveX dans Internet Explorer dans toutes les zones, collez le contenu suivant dans un fichier...

CVE-2021-40444

〖EXP〗Ladon CVE-2021-40444 Exploitation de la vulnérabilité Office Résumé de la vulnérabilité Le 8 septembre heure de Pékin, le CERT de NSFOCUS a surveillé la publication par Microsoft d'un avis de sécurité divulguant la vulnérabilité d'exécution de code à distance dans Microsoft MSHTML. Un...

RP_DCP_Code_Exec

Real Player 'DCP://' URI Remote Arbitrary Code Execution Vulnerability видео-демонстрация: https://youtu.be/AMODp3iTnqY Схема URI 'DCP://' — это внутренний протокол, используемый Real Player для получения URL-адресов, отображаемых на вкладке браузера плеера. Она расшифровывается как 'Data Cache...

RealPlayer_G2_RCE

Real Player v.20.0.8.310 G2 Control 'DoGoToURL' — уязвимость удаленного выполнения кода Видео-демонстрация: https://www.youtube.com/watch?v=9c9Q4VZQOUk Компонент G2 Control в Real Player содержит уязвимость удаленного выполнения кода, поскольку он допускает передачу URI 'javascript:' в качестве...

CVE-2018-15982

CVE-2018-15982 Sources Flash pour CVE-2018-15982 utilisées par NK ceci est un dump d'un objet activex entièrement armé utilisé par NK https://threatpost.com/adobe-patches-zero-day-vulnerability-in-flash-player/139629/ Les payloads sont dans les classes 6 et 7...

cve-2021-40444

cve-2021-40444 Rétro-ingénierie des fichiers malveillants "A Letter Before Court 4.docx" exploitant cve-2021-40444 Les fichiers y compris le document Word malveillant et le fichier cab peuvent être téléchargés sur any.run : https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ Note ! Le...

CVE-2019-0888

CVE-2019-0888 PoC pour CVE-2019-0888 - Use-After-Free dans Windows ActiveX Data Objects ADO Analyse : https://news.sophos.com/en-us/2019/07/09/cve-2019-0888-use-after-free-in-windows-activex-data-objects-ado/...

CVE-2025-26633

CVE-2025-26633 - PoC MSC EvilTwin Preuve de concept PoC pour la vulnérabilité CVE-2025-26633 exploitant la console de gestion Microsoft MMC À propos Ce PoC simule la vulnérabilité CVE-2025-26633, découverte par Trend Micro, qui exploite le chargement de fichiers .msc malveillants pour exécuter de...

MINI-65CP-6C7Q-5GWQ

Bulletin has no description...

The vulnerability of the ConnectToSynactis method of the ActiveX Synactis PDF In-The-Box control (PDF_IN_1.ocx) allows a attacker to execute arbitrary code.

The vulnerability of the ConnectToSynactis method of the ActiveX Synactis PDF In-The-Box control PDFIN1.ocx is related to the issue of operations going out of the buffer in memory when the code generation is not properly managed. Exploiting this vulnerability could allow a remote attacker to...

SUSE CVE-2010-4314

Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter...

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

SUSE CVE-2012-0439

An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via 1 a pointer argument to the SetEngine method or 2 an XPItem pointer argument to an unspecified method...

📄 Microsoft Windows Server 2025 jscript.dll Use-After-Free

The exploit targets a use-After-free vulnerability in the JScript engine component jscript.dll of Internet Explorer 11 on Windows Server 2025. ============================================================================================================================================= | Title :...

CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-2441 CVSS score: 8.8 - A use-after-free...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2008-0015link is external Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability CVE-2020-7796link is external Synacor Zimbra Collaboratio...

Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully...

CVE-2018-19444

A use after free in the TextBox field Validate action in IReaderContentProvider can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free locatio...

CVE-2018-19450

A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution...

CVE-2011-0248

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTL file...