336 matches found
0-Days Exposed in Several Corel Applications
UPDATE–Researchers from Core Security have disclosed DLL hijacking vulnerabilities in several applications made by Corel Software after the vendor didn’t respond to Core’s notifications about the flaws. There are no patches available for the bugs, which can allow remote code execution. Corel sell...
CVE-2011-5291
The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument...
Design/Logic Flaw
The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument...
CVE-2011-5291
The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary files via a pathname in the first argument...
CVE-2011-5291
The CVE-2011-5291 entry concerns Ashampoo 3D CAD Professional (3.x) before 3.0.2, where the SaveData method of the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx allows a remote attacker to write arbitrary files by supplying a pathname as the first argument. The vulnerability is rooted in...
IBM Tivoli Storage Manager Express RCA Service Buffer Overflow
No description provided by source. $Id: ibmtsmrcadicugetidentify.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Tickets CAD 2.20G Multiple Vulnerabilities
No description provided by source. Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities Date: Aug 4 2012 Exploit Author: chap0 @chap0 Vendor Homepage: http://www.ticketscad.org Software Link: http://www.ticketscad.org/downloads/Tickets06222012V220G.zip Version: 2.20G Tested on: Ubuntu Ticket...
SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 - Denial of Service
No description provided by source. ''' Exploit Title: SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 Remote Code Execution Vulnerability Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage:...
CATIA V5 CATSysDemon.exe缓冲区溢出漏洞
CATIA是数字产品定义及生命周期管理使用的CAD、CAE、CAM应用集成软件包。 CATIA V5 6R2013及其他版本处理某些数据包时，CATSysDemon.exe内出错，恶意用户通过发送特制的数据包到TCP端口55555，利用此漏洞可造成栈缓冲区溢出。 0 3ds catia-v5 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.3ds.com/...
SolidWorks Workgroup PDM 2014 SP2 - Arbitrary File Write Vulnerability
SolidWorks Workgroup PDM 2014 SP2 suffers from an arbitrary file write vulnerability. ''' Title: SolidWorks Workgroup PDM 2014 SP2 Arbitrary File Write Vulnerability Date: 2-21-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage:...
JVN#33382534: AutoCAD vulnerable to arbitrary VBScript execution
AutoCAD provided by Autodesk, Inc. is an application for comuputer-aided design CAD. AutoCAD loads specific FAS files when opening files. AutoCAD contains an issue with the FAS file search path, which may lead to arbitrary VBScript code execution. Impact Arbitrary VBScript code may be executed wi...
Catia V5-6R2013 - 'CATV5_Backbone_Bus' Stack Buffer Overflow (PoC)
''' Title: Dassault Syst�mes Catia V5-6R2013 "CATV5BackboneBus" Stack Buffer Overflow Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage: http://www.3ds.com/products-services/catia/portfolio/catia-v5/latest-release/ Tested on: Windows 7 & Windows XP...
SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 Buffer Overflow
Exploit Title: SolidWorks Workgroup PDM 2014 SP2 Opcode 2001 Remote Code Execution Vulnerability Date: 2-18-2014 Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage: http://www.solidworks.com/sw/products/product-data-management/workgroup-pdm.htm Tested on: Windows 7...
Catia V5-6R2013 - CATV5_AllApplications Stack Buffer Overflow (PoC)
Catia V5-6R2013 - CATV5AllApplications Stack Buffer Overflow PoC ''' Exploit Title: Dassault Systemes Catia V5-6R2013 "CATV5AllApplications" Stack Buffer Overflow Date: 2-18-2014 Exploit Author: Mohamed Shetta Email: mshetta |at| live |dot| com Vendor Homepage:...
Tickets CAD Multiple Vulnerabilities
Tickets CAD is prone to multiple vulnerabilities. 1. A Reflected XSS vulnerability exists in the search function, search.php within the application. 2. A Stored XSS vulnerability exists in log.php while creating a new log entry. 3. Information disclosure exist which allows users even the guest...
IBM-Tivoli-Storage
A vulnerability exists in the way IBM Tivoli Storage Manager Express 5.3 CAD Service Buffer Overflow process a clients request. The vulnerability is caused due to a boundary error in when handling network messages and can be exploited to cause a stack-based buffer overflow via a specially crafted...
Ashampoo 3D CAD ActiveX unsafe method
Unsafe SaveData method allows to create files...
Ashampoo 3D CAD Professional 3 ActiveX control Insecure Method
Vulnerability ID: HTB23019 Reference: http://www.htbridge.ch/advisory/ashampoo3dcadprofessional3activexcontrolinsecuremethod.html Product: Ashampoo 3D CAD Professional 3 Vendor: Ashampoo GmbH Co http://www.ashampoo.com Vulnerable Version: 3.0.1 and probably prior Tested on: 3.0.1 Vendor...
Ashampoo 3D CAD Professional 3.0.1 Insecure Method
Vulnerability ID: HTB23019 Reference: http://www.htbridge.ch/advisory/ashampoo3dcadprofessional3activexcontrolinsecuremethod.html Product: Ashampoo 3D CAD Professional 3 Vendor: Ashampoo GmbH & Co http://www.ashampoo.com Vulnerable Version: 3.0.1 and probably prior Tested on: 3.0.1 Vendor...
Ashampoo 3D CAD Professional 3 ActiveX control Insecure Method
High-Tech Bridge SA Security Research Lab has discovered a vulnerability in Ashampoo 3D CAD Professional 3 ActiveX control which could be exploited to compromise vulnerable system. 1 Insecure method in Ashampoo 3D CAD Professional 3 ActiveX Control The vulnerability is caused due to the...