Ashampoo 3D CAD ActiveX unsafe method

Unsafe SaveData method allows to create files...

Ashampoo 3D CAD Professional 3 ActiveX control Insecure Method

Vulnerability ID: HTB23019 Reference: http://www.htbridge.ch/advisory/ashampoo3dcadprofessional3activexcontrolinsecuremethod.html Product: Ashampoo 3D CAD Professional 3 Vendor: Ashampoo GmbH Co http://www.ashampoo.com Vulnerable Version: 3.0.1 and probably prior Tested on: 3.0.1 Vendor...

InduSoft ISSymbol ActiveX Control Buffer Overflow

Overview ICS-CERT has received a report from independent security researcher Dmitriy Pletnev of Secunia Research about ActiveX control buffer overflow vulnerabilities with proof-of-concept exploit code affecting the InduSoft ISSymbol product. Secunia has coordinated with InduSoft, who has produce...

Ashampoo 3D CAD Professional 3.0.1 Insecure Method

Vulnerability ID: HTB23019 Reference: http://www.htbridge.ch/advisory/ashampoo3dcadprofessional3activexcontrolinsecuremethod.html Product: Ashampoo 3D CAD Professional 3 Vendor: Ashampoo GmbH & Co http://www.ashampoo.com Vulnerable Version: 3.0.1 and probably prior Tested on: 3.0.1 Vendor...

CygniCon CyViewer - ActiveX Control 'SaveData()' Insecure Method

source: https://www.securityfocus.com/bid/48483/info CygniCon CyViewer ActiveX control is prone to a vulnerability caused by an insecure method. Successfully exploiting this issue will allow attackers to create or overwrite files within the context of the affected application typically Internet...

CygniCon CyViewer - ActiveX Control SaveData() Insecure Method

CygniCon CyViewer - ActiveX Control SaveData Insecure Method source: https://www.securityfocus.com/bid/48483/info CygniCon CyViewer ActiveX control is prone to a vulnerability caused by an insecure method. Successfully exploiting this issue will allow attackers to create or overwrite files within...

Ubisoft CoGSManager ActiveX Control 1.0.0.23 - Initialize() Method Stack Buffer Overflow

Ubisoft CoGSManager ActiveX Control 1.0.0.23 - Initialize Method Stack Buffer Overflow source: https://www.securityfocus.com/bid/48462/info Ubisoft CoGSManager ActiveX control is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds check...

Easewe FTP 4.5.0.9 Insecure Method

Vulnerability ID: HTB23015 Reference: http://www.htbridge.ch/advisory/easeweftpocxactivexcontrolexecuteinsecuremethod.html Product: Easewe FTP OCX ActiveX Control Vendor: Easewe Software http://www.ftpocx.com Vulnerable Version: 4.5.0.9 and probably prior Tested on: 4.5.0.9 Vendor Notification: 0...

Kofax 2.5.0.933 File Overwrite

Vulnerability ID: HTB23016 Reference: http://www.htbridge.ch/advisory/kofaxetransactionssendersendboxactivexcontrolsavemessageinsecuremethod.html Product: Kofax e-Transactions Sender Sendbox Vendor: Kofax, Inc http://www.kofax.com/ Vulnerable Version: 2.5.0.933 and probably prior Tested on:...

Easewe FTP OCX ActiveX Control code execution

Unsafe methods allow data access and code execution...

LeadTools Imaging LEADSmtp - ActiveX Control 'SaveMessage()' Insecure Method

source: https://www.securityfocus.com/bid/48408/info LEADTOOLS Imaging LEADSmtp ActiveX control is prone to a vulnerability caused by an insecure method. Successfully exploiting this issue will allow attackers to create or overwrite files within the context of the affected application typically...

HTB23015: Easewe FTP ActiveX Control Multiple Insecure Methods

Vulnerability ID: HTB23015 Reference: http://www.htbridge.ch/advisory/easeweftpocxactivexcontrolexecuteinsecuremethod.html Product: Easewe FTP OCX ActiveX Control Vendor: Easewe Software http://www.ftpocx.com Vulnerable Version: 4.5.0.9 and probably prior Tested on: 4.5.0.9 Vendor Notification: 0...

LeadTools Imaging LEADSmtp - ActiveX Control SaveMessage() Insecure Method

LeadTools Imaging LEADSmtp - ActiveX Control SaveMessage Insecure Method source: https://www.securityfocus.com/bid/48408/info LEADTOOLS Imaging LEADSmtp ActiveX control is prone to a vulnerability caused by an insecure method. Successfully exploiting this issue will allow attackers to create or...

Easewe FTP OCX ActiveX Control 4.5.0.9 - EaseWeFtp.ocx Multiple Insecure Method Vulnerabilities

Easewe FTP OCX ActiveX Control 4.5.0.9 - EaseWeFtp.ocx Multiple Insecure Method Vulnerabilities source: https://www.securityfocus.com/bid/48393/info Easewe FTP OCX ActiveX control is prone to multiple insecure-method vulnerabilities. Attackers can exploit these issues to perform unauthorized...

Paltalk Messenger ActiveX Control Multiple Insecure Methods

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Paltalk Messenger, which can be exploited to overwrite arbitrary files. 1 Insecure methods in Paltalk Messenger ActiveX Control 1.1 The vulnerability is caused due to the Office Viewer ActiveX control Oa.ocx...

Easewe FTP OCX ActiveX Control 4.5.0.9 - 'EaseWeFtp.ocx' Multiple Insecure Method Vulnerabilities

source: https://www.securityfocus.com/bid/48393/info Easewe FTP OCX ActiveX control is prone to multiple insecure-method vulnerabilities. Attackers can exploit these issues to perform unauthorized actions or execute arbitrary programs. Successful exploits may result in compromise of affected...

Black Ice Cover Page ActiveX Control Arbitrary File Download

This module allows remote attackers to place arbitrary files on a users file system by abusing the "DownloadImageFileURL" method in the Black Ice BIImgFrm.ocx ActiveX Control BIImgFrm.ocx 12.0.0.0. Code execution can be achieved by first uploading the payload to the remote machine, and then uploa...

Black Ice Cover Page ActiveX Control Arbitrary File Download

$Id: blackicedownloadimagefileurl.rb 12992 2011-06-21 02:51:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Black Ice Cover Page ActiveX Control Arbitrary File Download

Exploit for windows platform in category remote exploits $Id: blackicedownloadimagefileurl.rb 12992 2011-06-21 02:51:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Black Ice Cover Page - ActiveX Control Arbitrary File Download (Metasploit)

$Id: blackicedownloadimagefileurl.rb 12992 2011-06-21 02:51:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...