CVE-2014-7897

HP OPOS CCO drivers released before 1.13.003 are affected by ARBITRARY CODE EXECUTION via OPOSScanner.ocx and related ActiveX controls across HP POS devices. The connected Nessus/HP advisories identify CVE-2014-7897 and related CVEs (e.g., 2014-7888..7898) as remote code execution vulnerabilities...

CVE-2014-7897: Undefined Security Weakness

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSScanner.ocx for Imaging Barcode scanners, Linear Barcode scanners, Presentation Barcode scanners, Retail Integrated Barcode scanners,...

CVE-2014-6869

The barcode scanner aka tw.com.books.android.plus application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The barcode scanner aka tw.com.books.android.plus application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6869

The affected software is the Android barcode scanner app (tw.com.books.android.plus) version 2.3.0. The root cause is that it does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. This...

CVE-2014-6869: Undefined Security Weakness

The barcode scanner aka tw.com.books.android.plus application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PrecisionID Barcode ActiveX 1.9 - Remote Denial of Service Exploit

No description provided by source. pre span style=font: 14pt Courier New;p align=centerb2007/05/16/b/p/span codespan style=font: 10pt Courier New;span class=general1-symbol--------------------------------------------------------------------------------------- bIE 6 PrecisionID Barcode ActiveX 1.9...

PrecisionID Barcode ActiveX 1.3 - Denial of Service Exploit

No description provided by source. pre span style=font: 14pt Courier New;p align=centerb2007/05/12/b/p/span codespan style=font: 10pt Courier New;span class=general1-symbol-------------------------------------------------------------------------------- bPrecisionID Barcode ActiveX...

barcodegen <= 2.0.0 - Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl barcodegen = 2.0.0 Local File Inclusion Vulnerability Script: Barcode Generator 1D Script site:...

Barcode Generator 2.0 'LSTable.php' Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31419/info Barcode Generator is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

Black Ice Cover Page ActiveX Control Arbitrary File Download

No description provided by source. $Id: blackicedownloadimagefileurl.rb 12992 2011-06-21 02:51:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensin...

PrecisionID Barcode PrecisionID_Barcode.DLL ActiveX 1.9 Control Arbitrary File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24014/info pre span style=font: 14pt Courier New;p align=centerb2007/05/16/b/p/span codespan style=font: 10pt Courier New;span...

Morovia Barcode File Overwrite

Exploit Title: Morovia Barcode ActiveX Professional 3 File Overwrite Exploit Date: July 24, 2012 Author: coolkaveh [email protected] Https://twitter.com/coolkaveh Vendor Homepage:http://www.morovia.com/component/barcode-activex/ Version: 3.8.0 Tested on: windows 7 awesome coolkaveh...

PHP-Barcode 0.3pl1 - Remote Code Execution

PHP-Barcode 0.3pl1 - Remote Code Execution PHP-Barcode 0.3pl1 Remote Code Execution The input passed to the code parameter is not sanitized and is used on a popen function. This allows remote command execution and also allows to see environment vars: Windows...

PHP-Barcode 0.3pl1 Code Execution

PHP-Barcode 0.3pl1 Remote Code Execution The input passed to the code parameter is not sanitized and is used on a popen function. This allows remote command execution and also allows to see environment vars: Windows http://www.site.com/php-barcode/barcode.php?code=%TMP% Linux...

PHP-Barcode 0.3pl1 - Remote Code Execution

PHP-Barcode 0.3pl1 Remote Code Execution The input passed to the code parameter is not sanitized and is used on a popen function. This allows remote command execution and also allows to see environment vars: Windows http://www.site.com/php-barcode/barcode.php?code=%TMP% Linux...

PHP-Barcode 0.3pl1 Remote Code Execution

No description provided by source. PHP-Barcode 0.3pl1 Remote Code Execution The input passed to the code parameter is not sanitized and is used on a popen function. This allows remote command execution and also allows to see environment vars: Windows...

PHP-Barcode 0.3pl1 Remote Code Execution

PHP-Barcode 0.3pl1 Remote Code Execution ================================= The input passed to the code parameter is not sanitized and is used on a popen function. This allows remote command execution and also allows to see environment vars: Windows...

PHP-Barcode 0.3pl1 Remote Code Execution

Exploit for php platform in category web applications PHP-Barcode 0.3pl1 Remote Code Execution The input passed to the code parameter is not sanitized and is used on a popen function. This allows remote command execution and also allows to see environment vars: Windows...

Black Ice Cover Page - ActiveX Control Arbitrary File Download (Metasploit)

$Id: blackicedownloadimagefileurl.rb 12992 2011-06-21 02:51:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...