11684 matches found
Sony Network Cameras Heap-based Buffer Overflow (CVE-2007-3488)
Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and...
Microsoft ActiveX Object Model Code Execution
The vulnerability of the Microsoft ActiveX object model in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the categories of damage listed below. The most serious vulnerability has been assigned attribute CVE-2024-38124 and is located in the NETLOGON functionality...
CVE-2024-43517
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...
CVE-2024-43517
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...
CVE-2024-43517 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
...
CVE-2024-43517
CVE-2024-43517 is a Microsoft ActiveX Data Objects Remote Code Execution vulnerability. Documented details indicate an in-the-wild risk with network access (AV:N) and user interaction required (UI:R), with a high impact on confidentiality, integrity, and availability (C/I/A: High) and a base scor...
CVE-2024-43517 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
...
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
...
CVE-2024-43517: Heap-based Buffer Overflow
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...
Microsoft ActiveX security vulnerabilities
Microsoft ActiveX are small applications from Microsoft USA that allow websites to serve up content such as videos and games. They also let you interact with content such as toolbars and stock quotes while browsing the Web. A security vulnerability exists in Microsoft ActiveX. An attacker...
New Attack Technique Exploits Microsoft Management Console Files
Threat actors are exploiting a novel attack technique in the wild that leverages specially crafted management saved console MSC files to gain full code execution using Microsoft Management Console MMC and evade security defenses. Elastic Security Labs has codenamed the approach GrimResource after...
January 9, 2024—KB5034134 (OS Build 10240.20402) - EXPIRED
None None...
January 9, 2024—KB5034119 (OS Build 14393.6614) - EXPIRED
None None...
ActiveX Data Objects Code Execution
The vulnerability of the application programming interface for accessing ActiveX Data Objects ADO on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Windows Defender - VBScript Detection Bypass Vulnerability
This is additional research regarding a mitigation bypass in Windows Defender. Back in 2022, the researcher disclosed how it could be easily bypassed by passing an extra path traversal when referencing mshtml but that issue has since been mitigated. However, the researcher discovered using multip...
Microsoft Windows Defender / Trojan.Win32/Powessere.G VBScript Detection Bypass
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: https://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSDEFENDERVBSCRIPTTROJANMITIGATIONBYPASS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender Vulnerability Type...
Microsoft Windows Defender - VBScript Detection Bypass
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: https://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSDEFENDERVBSCRIPTTROJANMITIGATIONBYPASS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender Vulnerability Type...