CVE-2013-5024

An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted 1 key-open or 2...

Design/Logic Flaw

An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted 1 key-open or 2...

Path traversal

Multiple absolute path traversal vulnerabilities in National Instruments cwui.ocx, as used in National Instruments LabWindows/CVI 2012 SP1 and earlier, National Instruments LabVIEW 2012 SP1 and earlier, the Data Analysis component in ABB DataManager 1 through 6.3.6, and other products allow remot...

CVE-2013-5025

An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files...

CVE-2013-5026

CVE-2013-5026 affects National Instruments Lookout 6.5–6.7, where the ActiveX controls lookout650.ocx , lookout660.ocx , and lookout670.ocx allow remote code execution. The root cause is triggering the download of, and calls to, an arbitrary DLL file, enabling an attacker to run arbitrary code on...

CVE-2013-5022

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to t...

CVE-2013-5024

An ActiveX control in NationalInstruments.Help2.dll in National Instruments NI .NET Class Library Help, as used in Measurement Studio 2013 and earlier and other products, allows remote attackers to obtain sensitive information about the existence of registry keys via crafted 1 key-open or 2...

CVE-2013-5021

The CVE-2013-5021 issue affects multiple National Instruments CWUI ActiveX controls (CWNumEdit, CWGraph, CWBoolean, CWSlide, CWKnob) used in NI LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and ABB DataManager Data Analysis. A root cause in the ExportStyle() method enables ab...

CVE-2013-5022: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the 3D Graph ActiveX control in cw3dgrph.ocx in National Instruments LabWindows/CVI 2012 SP1 and earlier, LabVIEW 2012 SP1 and earlier, and other products allows remote attackers to create and execute arbitrary files via a full pathname in an argument to t...

PT-2013-5337

Name of the Vulnerable Software and Affected Versions National Instruments Lookout versions 6.5 through 6.7 Description The issue allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file through an ActiveX control in certain ocx files...

PT-2013-5335

Name of the Vulnerable Software and Affected Versions National Instruments NI .NET Class Library Help versions prior to the version that includes the fix for this issue Description The issue allows remote attackers to obtain sensitive information about the existence of registry keys via crafted...

PT-2013-5336

Name of the Vulnerable Software and Affected Versions National Instruments LabWindows/CVI versions prior to 2013 Description The issue concerns an ActiveX control in the exlauncher.dll file within the Help subsystem, which can be exploited by remote attackers to cause a denial of service. This is...

CVE-2013-5025: Undefined Security Weakness

An ActiveX control in exlauncher.dll in the Help subsystem in National Instruments LabWindows/CVI before 2013 allows remote attackers to cause a denial of service by triggering the display of local example files...

TEC-IT TBarCode OCX ActiveX Control (TBarCode4.ocx 4.1.0 ) - Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on:...

TEC-IT TBarCode - OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)

TEC-IT TBarCode - OCX ActiveX Control TBarCode4.ocx 4.1.0 Crash PoC Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link:...

TEC-IT TBarCode - OCX ActiveX Control (TBarCode4.ocx 4.1.0) Crash (PoC)

Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 dos poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on: Windows XP SP3 Exception Code: ACCESSVIOLATION...

TEC-IT TBarCode OCX ActiveX Control Buffer Overflow

Exploit Title: TEC-IT TBarCode OCX ActiveX Control TBarCode4.ocx 4.1.0 BOF poc Date: 29.7.2013 Exploit Author: d3b4g Vendor Homepage:http://www.tec-it.com/en/start/Default.aspx Software Link: http://www.tec-it.com/en/start/Default.aspx Tested on: Windows XP SP3 Exception Code: ACCESSVIOLATION...

PT-2013-5198

Name of the Vulnerable Software and Affected Versions HP LoadRunner versions prior to 11.52 Description The issue allows remote attackers to execute arbitrary code. The vulnerability is related to the lrFileIOService ActiveX Control, specifically the WriteFileString method, which enables remote...

Hewlett-Packard LoadRunner lrFileIOService ActiveX Control WriteFileBinary Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LoadRunner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the lrFileIOServic...

PT-2013-3704

Name of the Vulnerable Software and Affected Versions HP LoadRunner versions prior to 11.52 Description The issue allows remote attackers to execute arbitrary code. The vulnerability is related to the lrFileIOService ActiveX Control, specifically the CreateFileCont function, which enables remote...