Honeywell Multiple Products HscRemoteDepoy.dll ActiveX Control Arbitrary Code Execution

Binary data scadahoneywellhscremotedeployactivex.nbin...

EastFTP Active-X Code Execution

EastFTP ActiveX Control 0Day By: DrIDE Vendor Homepage:http://www.ftpocx.com/download.htm Version: 4.6.02 Self Promotion: http://irresponsibledisclosure.blogspot.com var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta";...

CVE-2013-0674

Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter...

Buffer overflow

Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter...

CVE-2013-0674

Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to execute arbitrary code via a long parameter...

EastFTP 4.6.02 - ActiveX Control

EastFTP 4.6.02 - ActiveX Control EastFTP ActiveX Control 0Day By: DrIDE Vendor Homepage:http://www.ftpocx.com/download.htm Version: 4.6.02 Self Promotion: http://irresponsibledisclosure.blogspot.com var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start...

EastFTP ActiveX Control 0Day

Exploit for windows platform in category local exploits var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = " var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; var easy = 1;...

EastFTP 4.6.02 - ActiveX Control

EastFTP ActiveX Control 0Day By: DrIDE Vendor Homepage:http://www.ftpocx.com/download.htm Version: 4.6.02 Self Promotion: http://irresponsibledisclosure.blogspot.com var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta";...

Samsung Kies < 2.5.0.12094_27_11 Multiple ActiveX Control Vulnerabilities

The version of Samsung Kies ActiveX controls installed on the remote host is affected by multiple vulnerabilities : - A vulnerability in GetDataTable method in 'DCAPARAGONGM.dll' is affected by a NULL pointer dereference that could be used to perform a denial of service of the program...

Microsoft Internet Explorer removeChild释放后重用远程代码执行漏洞(CVE-2013-0094)(MS13-021)

BUGTRAQ ID: 58348 CVECAN ID: CVE-2013-0094 Microsoft Internet Explorer是微软公司推出的一款网页浏览器 Microsoft Internet Explorer 6/7/8/9/10在removeChild的实现上存在释放后重用远程代码执行漏洞，在用户使用 Internet Explorer 查看特制网页时允许远程执行代码。成功利用这些漏洞的攻击者可以获得与当前用户相同的用户权限。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小 0 Microsoft Internet Explorer 9...

Honeywell HSC Remote Deployer - ActiveX Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Honeywell HSC...

Metasploit Module Released for Patched Honeywell ICS Vulnerability

Metasploit today released an exploit module for a serious vulnerability in Honeywell industrial control system software used to manage everything from HVAC and building access systems, to energy and facilities management processes. The vulnerability was reported by Rapid7 researcher Juan Vazquez ...

Honeywell HSC Remote Deployer ActiveX Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Honeywell HSC...

MS KB2819372: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10

The remote host is missing KB2819372. It may, therefore, be affected by the following vulnerabilities related to the installed version of the Adobe Flash ActiveX control : - A buffer overflow error exists related to the 'broker service'. CVE-2013-0504 - An unspecified error exists related to...

Ubisoft Uplay 2.0.3 ActiveX Control Arbitrary Code Execution (CVE-2012-4177)

A remote code execution vulnerability exists in Ubisoft Uplay 2.0.3. The vulnerability is due to insufficient verification of a command path parameter value when parsing a Uplay ActiveX object. A remote attacker can exploit this vulnerability by enticing a user to open a webpage that contains a...

CVE-2013-0108

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator EBI R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager aka CPO-M Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code vi...

Design/Logic Flaw

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator EBI R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager aka CPO-M Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code vi...

CVE-2013-0108

An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator EBI R310, R400.2, R410.1, and R410.2; SymmetrE R310, R410.1, and R410.2; ComfortPoint Open Manager aka CPO-M Station R100; and HMIWeb Browser client packages allows remote attackers to execute arbitrary code vi...

CVE-2013-0108

CVE-2013-0108 affects Honeywell EBI, SymmetrE, CPO-M, and related HMIWeb Browser components, where an ActiveX control in HscRemoteDeploy.dll can be abused to execute arbitrary code via a crafted HTML document. Affected versions include EBI R310, R400.2, R410.1, R410.2; SymmetrE R310, R410.1, R410...

CVE-2012-0439

An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code via 1 a pointer argument to the SetEngine method or 2 an XPItem pointer argument to an unspecified method...