EUVD-2020-28742

Malware in sbrugna...

EUVD-2020-28783

Malware in sbrugna...

EUVD-2020-28782

Malware in sbrugna...

Malicious code in @malware-test-spald-rumbo-cades-opine/test-mlw3-spald-rumbo-cades-opine (npm)

The package @malware-test-spald-rumbo-cades-opine/test-mlw3-spald-rumbo-cades-opine was found to contain malicious code...

CVE-2019-19164

dext5.ocx ActiveX Control in Dext5 Upload 5.0.0.112 and earlier versions contains a vulnerability that could allow remote files to be executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code...

CVE-2020-7850

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

Malicious code in wwebsocket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c5641c17f0936710ba606db1f88a8a964d11f352cebacdcec2c1bf55889debfa Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

CVE-2022-23763: Origin Validation Error

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections...

CVE-2020-7851 Innorix File Transfer Solution File Download and Execution Vulnerability

Innorix Web-Based File Transfer Solution versuibs prior to and including 9.2.18.385 contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the internal method. A remote attacker could induce a user to access a crafted web page, causing...

PT-2021-12674

Name of the Vulnerable Software and Affected Versions: Innorix Web-Based File Transfer Solution versions prior to and including 9.2.18.385 Description: The issue allows remote files to be downloaded and executed by setting the arguments to an internal method. A remote attacker could induce a user...

Innorix Web-Based File Transfer Parameter Injection Vulnerability

INNORIX Innorix Web-Based File Transfer is an application system from INNORIX Korea. It is used for file transfer. Web-Based File Transfer Solution 9.2.18.385 suffers from a parameter injection vulnerability that can be exploited by a remote attacker to potentially trick a user into visiting a...

CVE-2020-7850

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

PT-2021-12673

Name of the Vulnerable Software and Affected Versions: Groupware affected versions not specified Description: The issue allows remote files to be downloaded and executed by setting the arguments to the ActiveX method in the NBBDownloader.ocx ActiveX Control. A remote attacker could induce a user ...

CVE-2020-7810

hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. This is due to a lack of integrity verification of the policy files referenced in the update process, and a remote attacke...

Design/Logic Flaw

hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. This is due to a lack of integrity verification of the policy files referenced in the update process, and a remote attacke...

PT-2020-19807

Name of the Vulnerable Software and Affected Versions Groupware affected versions not specified Description The issue is related to the hslogin2.dll ActiveX Control in Groupware, which lacks integrity verification of policy files during the update process. This allows a remote attacker to induce ...

CVE-2020-7810: Missing Support for Integrity Check

hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. This is due to a lack of integrity verification of the policy files referenced in the update process, and a remote attacke...

CVE-2019-19164 Dext5 Upload ActiveX Arbitrary File Execution Vulnerability

dext5.ocx ActiveX Control in Dext5 Upload 5.0.0.112 and earlier versions contains a vulnerability that could allow remote files to be executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code...

PT-2020-10069

Name of the Vulnerable Software and Affected Versions Dext5 Upload versions 5.0.0.112 and earlier Description The issue allows remote files to be executed by setting the arguments to the ActiveX method. A remote attacker could induce a user to access a crafted web page, causing damage such as...

Microsoft Excel Files Containing Malicious Macro

Microsoft Excel files might contain a malicious macros. A remote attacker could send spam e-mails including those macros, and use social engineering in order to convince users to manually enable them. This would allow the malicious code to run and infect the target system...