Cisco AnyConnect Secure Mobility Client and Secure Desktop WebLaunch Software Downgrade Vulnerability

Cisco AnyConnect Secure Mobility Client and Secure Desktop contain a vulnerability that could allow an unauthenticated, remote attacker to replace software components on a targeted system. The vulnerability exists because the affected software performs insufficient validation of user-supplied...

Buffer overflow

Buffer overflow in the AttachmentTimes method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument...

CVE-2012-2175

Buffer overflow in the AttachmentTimes method in a certain ActiveX control in dwa85W.dll in IBM Lotus iNotes 8.5.x before 8.5.3 FP2 allows remote attackers to execute arbitrary code via a long argument...

CVE-2012-2175

CVE-2012-2175 describes a buffer overflow in the Attachment_Times handling of the dwa85W.dll ActiveX control used by IBM Lotus iNotes 8.5.x. The overflow arises from processing a long argument to the Attachment_Times property, leading to remote code execution. Documented impact is remote executio...

IBM Lotus iNotes Upload Module ActiveX Control Attachment_Times() Method Buffer Overflow

The Lotus iNotes Upload Module ActiveX Control is installed on the remote Windows host. The installed version of the control is affected by a buffer overflow vulnerability in the AttachmentTimes method. By tricking a victim into visiting a specially crafted page, an attacker may be able to execut...

Cisco Linksys PlayerPT ActiveX Control Buffer Overflow

A buffer overflow vulnerability has been reported in Cisco Linksys...

Siemens WinCC WebNavigator Multiple Vulnerabilities

Overview Siemens has reported multiple vulnerabilities in the Siemens WinCC WebNavigator application. These vulnerabilities were originally reported directly to Siemens by Positive Technologies. Siemens has produced an update that mitigates these vulnerabilities. These vulnerabilities could be...

Tom Sawyer Software GET Extension Factory Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

Tom Sawyer Software GET Extension Factory Remote Code Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Tom Sawyer Software GET Extension Factory - Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

CVE-2012-1818

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors...

Design/Logic Flaw

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors...

CVE-2012-1818

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors...

CVE-2012-1818

The CVE-2012-1818 issue affects Emerson DeltaV and DeltaV Workstations (versions 9.3.1, 10.3.1, 11.3, 11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. An unspecified ActiveX control may allow remote attackers to overwrite arbitrary files via unknown vectors. Public sources describe this...

Samsung NET-i viewer - Multiple ActiveX 'BackupToAvi()' Remote Overflows (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Samsung NET-i...

CVE-2012-0985

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.0064, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0...

CVE-2012-0985

The CVE-2012-0985 issue affects Sony VAIO Wireless Manager components (ActiveX control in WifiMan.dll and related VAIO utilities). Multiple buffer overflows in SetTmpProfileOption() and ConnectToNetwork() allow a remote attacker to crash the application and potentially execute arbitrary code via ...

Samsung NET-i viewer Multiple ActiveX BackupToAvi() Remote Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Sony VAIO Wireless Manager ActiveX控件'WifiMan.dll'缓冲区溢出漏洞

Bugtraq ID: 53735 CVE ID：CVE-2012-0985 Sony VAIO Wireless Manager是索尼笔记本上安装的无线管理程序。 Sony VAIO Wireless Manager ActiveX控件存在缓冲区溢出，攻击者可以利用漏洞以应用程序上下文执行任意代码。 漏洞是由于WifiMan.dll库中的SetTmpProfileOption和ConnectToNetwork方法没有正确检查字符串参数长度引起的，攻击者可以构建恶意WEB页，诱使用户解析来触发。 0 Sony VAIO Wireless Manager 4.0.0.0 厂商解决方案 So...

IBM Lotus iNotes dwa85W ActiveX Buffer Overflow

This module exploits a buffer overflow vulnerability on the UploadControl ActiveX. The vulnerability exists in the handling of the "AttachmentTimes" property, due to the insecure usage of the swscanf. The affected ActiveX is provided by the dwa85W.dll installed with the IBM Lotus iNotes ActiveX...