Maimed Ramnit Still Lurking in the Shadow

Newspapers have the ability to do more than simply keep us current with worldly affairs; we can use them to squash bugs! Yet, as we move from waiting on the newspaper delivery boy to reading breaking news on ePapers, we lose the subtle art of bug squashing. Instead, we end up exposing ourselves t...

Flash ActiveX 28.0.0.137 - Code Execution (1)

Flash ActiveX 28.0.0.137 - Code Execution 1 CVE-2018-4878 flash exploit Pop up a calculator - tested with installation of flash activeX plugin 28.0.0.137 Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/44744.xlsx...

Flash ActiveX 28.0.0.137 - Code Execution (1)

CVE-2018-4878 flash exploit Pop up a calculator - tested with installation of flash activeX plugin 28.0.0.137 Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44744.xlsx...

Flash ActiveX 28.0.0.137 - Code Execution (2)

CVE-2018-4878 Pop up a calculator - Requires Flash ActiveX 28.0.0.137 Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44745.swf...

Flash ActiveX 28.0.0.137 - Code Execution (2)

Flash ActiveX 28.0.0.137 - Code Execution 2 CVE-2018-4878 Pop up a calculator - Requires Flash ActiveX 28.0.0.137 Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/44745.swf...

KLA10758 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10757. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

LEADTOOLS ActiveX control DLL Load Arbitrary Code Execution Vulnerability

LEADTOOLS ActiveX control is an ActiveX control. A security vulnerability exists in LEADTOOLS ActiveX control that allows remote attackers to construct malicious web pages that can be tricked into parsing, leading to arbitrary code execution...

Remotely through a browser using Microsoft Office DLL MS15-1 3 2）hijacking vulnerability-vulnerability warning-the black bar safety net

A few weeks ago, security researcher Parvez Anwar, working in their individual tweets posted on a lot of Microsoft Office DLL hijacking vulnerability1. Fig. A few weeks later, Microsoft released MS15-1 3 2 patch, fixed a related vulnerability, while addressing the is Google security research2in a...

MS KB3118753: Update for ActiveX Kill Bits

The remote Windows host is missing one or more kill bits for ActiveX controls that are known to contain vulnerabilities. If any of these ActiveX controls are ever installed on the remote host, either now or in the future, they would expose the host to various security issues. Note that the affect...

MS16-003: Cumulative Security Update for JScript and VBScript to Address Remote Code Execution (3125540)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the VBScript engine due to improper handling of objects in memory. An attacker can exploit this vulnerability by convincing a user to visit a specially crafted website or...

Cumulative Update for Windows 10: January 12, 2016

None None...

Cumulative Update for Windows 10 Version 1511: January 12, 2016

None None...

Schneider Electric ProClima < 6.2 Multiple Vulnerabilities

Binary data 9037.prm...

Xerox DocuShare Command Execution Vulnerability

Xerox DocuShare is a Web-based document content management solution from Xerox. The solution supports storage of any type of document, image or video, business process automation, document content sharing and collaboration. A command execution vulnerability exists in Xerox DocuShare. An attacker...

Xerox DocuShare Stack Buffer Overflow Vulnerability

Xerox DocuShare is a Web-based document content management solution from Xerox. The solution supports the storage of any type of document, image or video, business process automation, document content sharing and collaboration, and more. A stack buffer overflow vulnerability exists in Xerox...

CVE-2015-8561

The F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted integer value to the 1 AttachToSS, 2 CopyAll, 3 CopyRange, 4 CopyRangeEx, or 5 SwapTable method, a...

CVE-2015-7918

Multiple buffer overflows in the F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allow remote attackers to execute arbitrary code via the 1 Attach, 2 DefinedName, 3 DefinedNameLocal, 4 ODBCPrepareEx, 5 ObjCreatePolygon, 6 SetTabbedTextEx, or 7 SetValidationRule...

Memory corruption

The F1BookView ActiveX control in F1 Bookview in Schneider Electric ProClima before 6.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted integer value to the 1 AttachToSS, 2 CopyAll, 3 CopyRange, 4 CopyRangeEx, or 5 SwapTable method, a...

CVE-2015-8561

The connected sources confirm CVE-2015-8561 affects Schneider Electric ProClima’s F1BookView ActiveX control (F1 Bookview) in versions before 6.2. The vulnerability is described as a memory corruption issue that could allow remote code execution or a denial of service when a crafted integer is su...

CVE-2015-7918

The F1BookView ActiveX control in Schneider Electric ProClima before 6.2 contains multiple buffer overflows that can be triggered via the methods Attach, DefinedName, DefinedNameLocal, ODBCPrepareEx, ObjCreatePolygon, SetTabbedTextEx, and SetValidationRule, enabling remote code execution. This vu...