CVE-2025-26633

CVE-2025-26633 - MSC EvilTwin प्रूफ ऑफ कॉन्सेप्ट PoC CVE-2025-26633 भेद्यता के लिए प्रूफ ऑफ कॉन्सेप्ट PoC जो Microsoft Management Console MMC का शोषण करती है परिचय यह PoC, Trend Micro द्वारा खोजी गई CVE-2025-26633 भेद्यता का अनुकरण करता है, जो MMC संदर्भ में ActiveX के साथ HTML के माध्यम से दूरस्...

CVE-2021-40444

Microsoft MSHTML रिमोट कोड निष्पादन भेद्यता CVE-2021-40444 किसी व्यक्तिगत सिस्टम पर ActiveX नियंत्रण कैसे अक्षम करें ? 1. सभी ज़ोन में Internet Explorer में ActiveX नियंत्रण की स्थापना अक्षम करने के लिए, निम्नलिखित को एक टेक्स्ट फ़ाइल में पेस्ट करें और इसे .reg फ़ाइल एक्सटेंशन के साथ सहेजें:...

cve-2021-40444

cve-2021-40444 "ए लेटर बिफोर कोर्ट 4.docx" दुर्भावनापूर्ण फाइलों का रिवर्स इंजीनियरिंग जो cve-2021-40444 का शोषण करती हैं फाइलें दुर्भावनापूर्ण वर्ड और कैब-फाइल सहित any.run पर डाउनलोड की जा सकती हैं: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ ध्यान दें! मूल दुर्भावनापूर्ण को...

CVE-2021-40444

〖EXP〗إعادة إنتاج ثغرة CVE-2021-40444 في Office باستخدام Ladon نظرة عامة على الثغرة في 8 سبتمبر بتوقيت بكين، رصد فريق CERT في شركة NSFOCUS أن Microsoft نشرت إعلانًا أمنيًا كشفت فيه عن ثغرة تنفيذ التعليمات البرمجية عن بُعد في Microsoft MSHTML. يمكن للمهاجم إنشاء عناصر تحكم ActiveX خبيثة لاستخدامها ...

RP_DCP_Code_Exec

Real Player 'DCP://' URI Remote Arbitrary Code Execution Vulnerability عرض فيديو: https://youtu.be/AMODp3iTnqY مخطط URI 'DCP://' هو بروتوكول داخلي يستخدمه Real Player لاسترداد عناوين URL لعرضها في تبويب المتصفح الخاص بالمشغل. وهو اختصار لـ 'Data Cache Protocol'. يقوم باسترداد الملفات من...

RealPlayer_G2_RCE

ثغرة تنفيذ التعليمات البرمجية عن بُعد في Real Player v.20.0.8.310 G2 Control 'DoGoToURL' عرض فيديو: https://www.youtube.com/watch?v=9c9Q4VZQOUk يحتوي مكوّن G2 Control في Real Player على ثغرة تنفيذ التعليمات البرمجية عن بُعد لأنه يسمح بتمرير URIs بصيغة 'javascript:' كوسيط، وهو أمر غير آمن عادةً لأ...

CVE-2018-15982

CVE-2018-15982 फ़्लैश स्रोत CVE-2018-15982 के लिए NK द्वारा उपयोग किए गए यह NK द्वारा उपयोग किए गए पूरी तरह से हथियारबंद एक्टिवएक्स ऑब्जेक्ट का डंप है https://threatpost.com/adobe-patches-zero-day-vulnerability-in-flash-player/139629/ पेलोड क्लास 6 और 7 में हैं...

CVE-2019-0888

CVE-2019-0888 إثبات المفهوم PoC لـ CVE-2019-0888 - استخدام بعد التحرير Use-After-Free في كائنات بيانات ActiveX في ويندوز ADO الشرح: https://news.sophos.com/en-us/2019/07/09/cve-2019-0888-use-after-free-in-windows-activex-data-objects-ado/...

MINI-65CP-6C7Q-5GWQ

Bulletin has no description...

The vulnerability of the ConnectToSynactis method of the ActiveX Synactis PDF In-The-Box control (PDF_IN_1.ocx) allows a attacker to execute arbitrary code.

The vulnerability of the ConnectToSynactis method of the ActiveX Synactis PDF In-The-Box control PDFIN1.ocx is related to the issue of operations going out of the buffer in memory when the code generation is not properly managed. Exploiting this vulnerability could allow a remote attacker to...

SUSE CVE-2010-4314

Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter...

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

SUSE CVE-2012-0439

An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via 1 a pointer argument to the SetEngine method or 2 an XPItem pointer argument to an unspecified method...

📄 Microsoft Windows Server 2025 jscript.dll Use-After-Free

The exploit targets a use-After-free vulnerability in the JScript engine component jscript.dll of Internet Explorer 11 on Windows Server 2025. ============================================================================================================================================= | Title :...

CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added four security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-2441 CVSS score: 8.8 - A use-after-free...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2008-0015link is external Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability CVE-2020-7796link is external Synacor Zimbra Collaboratio...

Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully...

CVE-2018-19444

A use after free in the TextBox field Validate action in IReaderContentProvider can occur for specially crafted PDF files in Foxit Reader SDK ActiveX Professional 5.4.0.1031. An attacker can leverage this to gain remote code execution. Relative to CVE-2018-19452, this has a different free locatio...

CVE-2018-19450

A command injection can occur for specially crafted PDF files in Foxit Reader SDK ActiveX 5.4.0.1031 when parsing a launch action. An attacker can leverage this to gain remote code execution...

CVE-2011-0248

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted QTL file...