PT-2016-3920

Name of the Vulnerable Software and Affected Versions IBM SPSS Statistics versions 19 through 20 before 20.0.0.2-IF0008 IBM SPSS Statistics version 21 before 21.0.0.2-IF0010 IBM SPSS Statistics version 22 before 22.0.0.2-IF0011 IBM SPSS Statistics version 23 before 23.0.0.3-IF0001 IBM SPSS...

CVE-2015-8530: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.0.2-IF0010, 22 before 22.0.0.2-IF0011, 23 before 23.0.0.3-IF0001, and 24 before 24.0.0.0-IF0003 allows remote authenticated users to execute arbitra...

End of support for Office 2013

End of support for Office 2013 Support for Office 2013 ended on April 11, 2023 and there will be no extension and no extended security updates. All of your Office 2013 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks.Buy or try...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

KLA10811 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer. For details look at KLA10810. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

Acunetix WVS 10 远程代码执行漏洞 (System)

漏洞复现及分析 AWVS是一款常用的网站漏洞扫描工具，在漏洞扫描器进行扫描时，如果通过服务器提供一段包含恶意代码的页面，首先存在问题的网页会通知AWVS存在一个XSS漏洞，之后AWVS会在扫描任务中输出这个XSS漏洞的告警，之后AWVS会调用view response功能验证这个漏洞，在调用这个的过程中本地会执行一次漏洞的html网页，在执行的过程中，恶意构造的网页会在本地创建一个vb脚本，该脚本会去访问并获取另一段vb script从而执行而恶意代码，下面对此漏洞进行详细分析。 在分析之前，我需要提一点，本来想对wvs.exe进行动态跟踪，没想到wvs对debug有着严格的审查。...

Acunetix WVS 10 - Remote Command Execution (System)

Exploit for windows platform in category remote exploits ''' Acunetix WVS 10 - Remote command execution SYSTEM privilege - Author: Daniele Linguaglossa Overview ========= Acunetix WVS 10 1 is an enterprise web vulnerability scanner developer by Acunetix Inc. Two major flaws exists in the last...

Acunetix WVS 10 - Remote Command Execution

Acunetix WVS 10 - Remote Command Execution ''' Acunetix WVS 10 - Remote command execution SYSTEM privilege - Author: Daniele Linguaglossa Overview ========= Acunetix WVS 10 1 is an enterprise web vulnerability scanner developer by Acunetix Inc. Two major flaws exists in the last version of...

Schneider Electric SoMachine HVAC Unsafe ActiveX Control Vulnerability

OVERVIEW Andrea Micalizzi discovered an unsafe ActiveX control vulnerability in Schneider Electric’s SoMachine software. He reported this vulnerability to ZDI who then reported it to NCCIC/ICS‑CERT. Schneider Electric has produced a patch to mitigate this vulnerability. This vulnerability could b...

KLA10782 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet explorer and Microsoft Edge. For details look at KLA10780. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player,...

KLA10780 Multiple vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code or bypass security restrictions. Below is a complete list of vulnerabilities 1. An unknown vulnerability at JIT can be exploited to bypass layout...

Sharp EVA Animator ActiveX Control Buffer Overflow Vulnerability

Sharp EVA Animeter is an anime and manga skin by the Japanese company Sharp. A buffer overflow vulnerability exists in the ActiveX control of Sharp EVA Animeter. A remote attacker can exploit this vulnerability to execute arbitrary code via a specially crafted web page...

CVE-2016-1176

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

Buffer overflow

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

CVE-2016-1176

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

CVE-2016-1176

CVE-2016-1176 is a buffer overflow vulnerability in the ActiveX control for Sharp EVA Animeter. Multiple connected records confirm that remote attackers could exploit this by steering a user to a malicious page to execute arbitrary code, via the EVA Animator ActiveX control. The known affected co...

CVE-2016-1176: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

PT-2016-4623

Name of the Vulnerable Software and Affected Versions Sharp EVA Animeter affected versions not specified Description A buffer overflow issue exists in the ActiveX control of Sharp EVA Animeter, allowing remote attackers to execute arbitrary code through a crafted web page. Recommendations At the...