Lucene search
+L

11682 matches found

Positive Technologies
Positive Technologies
•added 2021/12/28 12:00 a.m.•2 views

PT-2021-12703

Name of the Vulnerable Software and Affected Versions: Printchaser versions 2.2021.804.1 and earlier Description: The issue allows a remote attacker to download and execute a remote file by setting the argument variable in the activeX module, which can be leveraged for code execution...

9.8CVSS0.00936EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/28 12:00 a.m.•3 views

CVE-2020-7883: Download of Code Without Integrity Check

Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution...

9.8CVSS6.2AI score0.00936EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/12/27 12:00 a.m.•50 views

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-33132)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. SAP 3D Visual Enterprise Viewer version 9.0 is...

4.3CVSS4AI score0.00563EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/12/21 12:00 a.m.•11 views

The vulnerability of the ActiveX control of Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of the ActiveX control in Internet Explorer is related to errors in processing the .mht file’s header. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted file to the user...

6.8CVSS6AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•3 views

PT-2021-30937

Уязвимость элемента управления ActiveX браузера Internet Explorer связана с ошибками обработки заголовка .mht файла. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код путем отправки пользователю специально сформированного файла...

6.8CVSS5.8AI score
SaveExploits0References2
zdt
zdt
•added 2021/12/14 12:00 a.m.•256 views

Microsoft Internet Explorer / ActiveX Control - Security Bypass Vulnerability

Exploit Title: Microsoft Internet Explorer / ActiveX Control - Security Bypass Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-ACTIVEX-CONTROL-SECURITY-BYPASS.txt twitter.com/hyp3rlinx ISR:...

SaveExploits0
Exploit DB
Exploit DB
•added 2021/12/14 12:00 a.m.•416 views

Microsoft Internet Explorer / ActiveX Control - Security Bypass

Exploit Title: Microsoft Internet Explorer / ActiveX Control - Security Bypass Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-ACTIVEX-CONTROL-SECURITY-BYPASS.txt twitter.com/hyp3rlinx ISR:...

5.3AI score
SaveExploits0
zdt
zdt
•added 2021/12/09 12:00 a.m.•385 views

Microsoft Office Word MSHTML Remote Code Execution Exploit

This Metasploit module creates a malicious docx file that when opened in Word on a vulnerable Windows system will lead to code execution. This vulnerability exists because an attacker can craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering...

8.8CVSS7.3AI score0.9784EPSS
SaveExploits38
zdt
zdt
•added 2021/12/06 12:00 a.m.•349 views

Microsoft Internet Explorer Active-X Control Security Bypass Vulnerability

Microsoft Internet Explorer suffers from an active-x related bypass vulnerability. Microsoft will not address the issue as it is end of life. + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

7.3AI score
SaveExploits0
NVD
NVD
•added 2021/11/30 7:15 p.m.•39 views

CVE-2020-7880

The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper parameter validation of StartNeoRS function in ActiveX...

9.3CVSS0.01659EPSS
SaveExploits0References1
OSV
OSV
•added 2021/11/30 7:15 p.m.•16 views

CVE-2020-7880

The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper parameter validation of StartNeoRS function in ActiveX...

8.8CVSS7.4AI score0.01659EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/11/30 7:15 p.m.•16 views

CVE-2020-7880

The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper parameter validation of StartNeoRS function in ActiveX...

9.3CVSS8.1AI score0.01659EPSS
SaveExploits0References2
Prion
Prion
•added 2021/11/30 7:15 p.m.•28 views

Design/Logic Flaw

The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper parameter validation of StartNeoRS function in ActiveX...

9.3CVSS8.6AI score0.01659EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/11/30 6:47 p.m.•46 views

CVE-2020-7880 douzone NeoRS remote support program ActiveX vulnerability

The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper parameter validation of StartNeoRS function in ActiveX...

7.5CVSS8.7AI score0.01659EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/30 6:47 p.m.•59 views

CVE-2020-7880

The CVE-2020-7880 entry concerns the NeoRS remote support program’s ActiveX module. The underlying flaw is improper parameter validation of the StartNeoRS function in the ActiveX component, enabling a remote attacker to download and execute a remote file. Affected software is the NeoRS ActiveX/re...

9.3CVSS8.2AI score0.01659EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2021/11/30 12:00 a.m.•20 views

NeoRS RS10 输入验证错误漏洞

Douzone Bizon NeoRs is a remote support service from Douzone Bizon in Korea. Remote Pc can be accessed and controlled anytime, anywhere through the remote support site. A security vulnerability exists in NeoRS RS10 version, which stems from improper validation of the parameters of the StartNeoRS...

9.3CVSS8.1AI score0.01659EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/11/30 12:00 a.m.•5 views

PT-2021-12700

Name of the Vulnerable Software and Affected Versions: ActiveX module related to NeoRS remote support program affected versions not specified Description: The issue allows a remote attacker to download and execute a remote file due to improper parameter validation of the StartNeoRS function in th...

9.3CVSS0.01659EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/30 12:00 a.m.•11 views

CVE-2020-7880: Improper Input Validation

The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper parameter validation of StartNeoRS function in ActiveX...

9.3CVSS6.1AI score0.01659EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/11/16 7:31 a.m.•11 views

CVE-2020-7883

Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution...

9.8CVSS8.7AI score0.00936EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/10/28 4:15 p.m.•27 views

CVE-2020-7875

DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution...

8.8CVSS0.00626EPSS
SaveExploits0References1
Rows per page
Query Builder