CVE-2013-3027

Integer overflow in the DWA9W ActiveX control in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to execute arbitrary code via a crafted web page, aka SPR PTHN97XHFW...

CVE-2013-3027

The provided connected documents confirm a concrete vulnerability: IBM Domino iNotes uses the DWA9W ActiveX control with an integer overflow in its handling of crafted web pages. Affects IBM Domino 9.0 before IF3; exploitation enables remote code execution with the attacker-controlled page. The i...

CVE-2013-5024

An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted 1 key-open or 2...

CVE-2013-5022

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to t...

CVE-2013-5026

An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file...

Path traversal

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remot...

Design/Logic Flaw

An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted 1 key-open or 2...

CVE-2013-5024

An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted 1 key-open or 2...

CVE-2013-5025

An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files...

CVE-2013-5022

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to t...

CVE-2013-5021

The CVE-2013-5021 issue affects multiple National Instruments CWUI ActiveX controls (CWNumEdit, CWGraph, CWBoolean, CWSlide, CWKnob) used in NI LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and ABB DataManager Data Analysis. A root cause in the ExportStyle() method enables ab...

CVE-2013-5026

CVE-2013-5026 affects National Instruments Lookout 6.5–6.7, where the ActiveX controls lookout650.ocx , lookout660.ocx , and lookout670.ocx allow remote code execution. The root cause is triggering the download of, and calls to, an arbitrary DLL file, enabling an attacker to run arbitrary code on...

TEC-IT TBarCode OCX ActiveX Control (TBarCode4.ocx 4.1.0 ) - Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on:...

TEC-IT TBarCode - OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)

TEC-IT TBarCode - OCX ActiveX Control TBarCode4.ocx 4.1.0 Crash PoC Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link:...

TEC-IT TBarCode - OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)

Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on: Windows XP SP3 Exception Code: ACCESSVIOLATION...

TEC-IT TBarCode OCX ActiveX Control Buffer Overflow

Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 BOF poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on: Windows XP SP3 Exception Code: ACCESSVIOLATION...

Hewlett-Packard LoadRunner lrFileIOService ActiveX Control WriteFileBinary Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LoadRunner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the lrFileIOServic...

CA Multiple Products gui_cm_ctrls.ocx ActiveX Control Arbitrary Code Execution

The remote host has the CA guicmctrls.ocx ActiveX control installed that is affected by an arbitrary code execution vulnerability due to insufficient verification of function arguments. By tricking a user into opening a specially crafted web page, a remote attacker may be able to execute arbitrar...

Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3145)

BUGTRAQ ID: 60964 CVECAN ID: CVE-2013-3145 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 7, 8, 9, 10不正确地访问内存中的对象时，存在远程执行代码漏洞。成功利用导致在当前用户的上下文执行任意代码，失败导致浏览器崩溃。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本...

Microsoft Internet Explorer内存破坏漏洞(CVE-2013-3146)（MS13-055)

BUGTRAQ ID: 60965 CVECAN ID: CVE-2013-3146 Windows Internet Explorer，简称MSIE，是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 7, 8, 9, 10不正确地访问内存中的对象时，存在远程执行代码漏洞。成功利用导致在当前用户的上下文执行任意代码，失败导致浏览器崩溃。 0 Microsoft Internet Explorer 6 - 10 临时解决方法： 将 Internet 和本地 Intranet 安全区域设置设为“高”，以便在这些区域中阻止 ActiveX 控件和活动脚本...