CVE-2021-26613

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

Input validation

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

CVE-2021-26613 tobesoft nexacro arbitrary file creation vulnerability

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

Tobesoft Nexacro 输入验证错误漏洞

Tobesoft Nexacro is a unified framework-based OSMU single-source multi-purpose application development solution from Tobesoft Corporation in South Korea. An input validation error vulnerability exists in Tobesoft nexacro, which can be exploited by an attacker to copy files to the startup folder...

CVE-2021-26612

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code...

CVE-2021-26612

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code...

CVE-2021-26612

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code...

Input validation

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code...

CVE-2021-26612

The CVE-2021-26612 issue affects the Nexacro platform and is caused by improper input validation in the copy method, enabling arbitrary file creation and allowing a remote attacker to execute arbitrary commands after the malicious code is written. Multiple sources (NVD entry and related catalogs)...

CVE-2021-26612 tobesoft Nexacro platform arbitrary file creation vulnerability

An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platform. Remote attackers use copy method to execute arbitrary command after the file creation included malicious code...

Tobesoft Nexacro 输入验证错误漏洞

Tobesoft Nexacro is a unified framework-based OSMU single-source multi-purpose application development solution from Tobesoft, South Korea. Nexacro 17 suffers from a security vulnerability that stems from an arbitrary file creation due to incorrect input validation found in the copy method of the...

CVE-2021-26607

An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems...

NEXACRO17 输入验证错误漏洞

Tobesoft Nexacro17 is a Unified Framework-based Osmu single-source multi-purpose application development solution from Tobesoft Korea. A security vulnerability exists in NEXACRO17, which could be exploited by a remote attacker to execute arbitrary commands on an affected system...

TOBESOFT Nexacro14/17 ExtCommonApiV13 Library Input Validation Error Vulnerability

Tobesoft Nexacro is an OSMU Single Source Multipurpose application development solution based on a unified framework. An input validation error vulnerability exists in TOBESOFT Nexacro 14/17 ExtCommonApiV13 Library versions prior to 2019.9.6, which allows a remote attacker to execute arbitrary co...

TOBESOFT Nexacro14/17 ExtCommonApiV13 Library Input Validation Error Vulnerability (CNVD-2021-18237)

Tobesoft Nexacro is an OSMU Single Source Multipurpose application development solution based on a unified framework. An input validation error vulnerability exists in TOBESOFT Nexacro 14/17 ExtCommonApiV13 Library versions prior to 2019.9.6, which allows remote attackers to exploit the...

CVE-2020-7821

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by modifying the value of registry path. This can be leveraged for code execution by rebooting the victim’s PC...

CVE-2020-7820

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC...

Tobesoft Nexacro Code Execution Vulnerability

Tobesoft Nexacro is a unified framework based OSMU single-source multi-purpose application development solution from Tobesoft Korea. A security vulnerability exists in Tobesoft Nexacro 2019.9.25.1 and earlier versions. A remote attacker can exploit the vulnerability to execute code...

CVE-2019-19167

Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution...

CVE-2019-19167

Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution...