PT-2020-19807

Name of the Vulnerable Software and Affected Versions Groupware affected versions not specified Description The issue is related to the hslogin2.dll ActiveX Control in Groupware, which lacks integrity verification of policy files during the update process. This allows a remote attacker to induce ...

CVE-2020-7810: Missing Support for Integrity Check

hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. This is due to a lack of integrity verification of the policy files referenced in the update process, and a remote attacke...

CVE-2019-19161

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification...

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

KB4561600: Security update for Adobe Flash Player (June 2020)

The remote Windows host is missing security update KB4561600. It is, therefore, affected by an use after free vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to execute arbitrary code within the context of the user. C Tenable Network Security, In...

Unspecified vulnerability in Kaoni ezHTTPTrans (CNVD-2021-37778)

Kaoni ezHTTPTrans is a forwarding proxy software. A security vulnerability exists in Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and earlier versions. A remote attacker can exploit this vulnerability to download arbitrary files and execute code...

CVE-2020-7812 Kaoni ezHTTPTrans Active-X File Download and Execution Vulnerability

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC...

CVE-2020-7812

CVE-2020-7812 affects Kaoni ezHTTPTrans (Ezhttptrans.ocx) ActiveX Control in versions ≤ 1.0.0.70. The vulnerability grants a remote attacker the ability to download arbitrary files by manipulating arguments to the ActiveX method, and can be leveraged for code execution by rebooting the victim’s P...

Unspecified Vulnerability in Kaoni ezHTTPTrans

Kaoni ezHTTPTrans is a forwarding proxy software. A security vulnerability exists in Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and earlier versions. A remote attacker can exploit the vulnerability to download and execute arbitrary files with specially crafted parameters...

Code injection

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download and execute arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

CVE-2020-7813 Kaoni ezHTTPTrans Active-X File Download and Execution Vulnerability

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download and execute arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

CVE-2020-7813

Summary: The vulnerability CVE-2020-7813 affects Kaoni ezHTTPTrans, specifically the Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and earlier. The underlying issue allows a remote attacker to download and execute arbitrary files by abusing the arguments passed to the ActiveX meth...

CVE-2020-7813: Download of Code Without Integrity Check

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download and execute arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution...

CVE-2020-1035: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

CVE-2020-1061: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

CVE-2020-1058: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...