Microsoft Windows ActiveX Control Multiple Vulnerabilities (2647518)

This script will list all the vulnerable activex controls installed on the remote windows machine with references and cause. OpenVAS Vulnerability Test $Id: gbmswindowsactivexcontrolmultvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ Microsoft Windows ActiveX Control Multiple Vulnerabilities 2647518...

McAfee Security-as-a-Service (SaaS) < 5.2.2 ActiveX Controls Arbitrary Code Execution (SB10016)

Multiple ActiveX controls, installed on the remote Windows host as part of McAfee Security-as-a-Service SaaS / Total Protection Service, are potentially affected by the following issues : - A flaw in the MyAsUtil.dll ActiveX control can be exploited to execute arbitrary commands. - A flaw in the...

mod_cluster: malicious worker nodes can register on any vhost

modcluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from ...

mod_cluster: malicious worker nodes can register on any vhost

modcluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from ...

mod_cluster: malicious worker nodes can register on any vhost

modcluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes to register with arbitrary virtual hosts, which allows remote attackers to bypass intended access restrictions and provide malicious content, hijack sessions, and steal credentials by registering from ...

USN-1326-1: Nova vulnerability

Nachi Ueno, Rohit Karajgi, and Venkatesan Ravikumar discovered that when Nova is configured to use the OpenStack API, it would not correctly enforce access controls on certain incoming requests. A remote authenticated attacker could exploit this to change resources of arbitrary tenants...

CVE-2011-4870

Multiple buffer overflows in the 1 GUIControls, 2 BatchObjSrv, and 3 BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property...

Buffer overflow

Multiple buffer overflows in the 1 GUIControls, 2 BatchObjSrv, and 3 BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property...

CVE-2011-4870

CVE-2011-4870 covers multiple buffer overflows in Invensys Wonderware InBatch, specifically the GUIControls, BatchObjSrv, and BatchSecCtrl ActiveX controls. Affected versions include InBatch 8.1 SP1, 9.0, 9.0 SP1, 9.0 SP2, and 9.5 Server/Runtime Clients; the root cause is improper handling of lon...

CVE-2011-4870

Multiple buffer overflows in the 1 GUIControls, 2 BatchObjSrv, and 3 BatchSecCtrl ActiveX controls in Invensys Wonderware InBatch 9.0 and 9.0 SP1, and InBatch 8.1 SP1, 9.0 SP2, and 9.5 Server and Runtime Clients, allow remote attackers to execute arbitrary code via a long string in a property...

VulnCheck KEV: CVE-2012-0158

Microsoft MSCOMCTL.OCX contains an unspecified vulnerability that allows for remote code execution, allowing an attacker to take complete control of an affected system under the context of the current user...

UBUNTU-CVE-2011-4600

The networkReloadIptablesRules function in network/bridgedriver.c in libvirt before 0.9.9 does not properly handle firewall rules on bridge networks when libvirtd is restarted, which might allow remote attackers to bypass intended access restrictions via a 1 DNS or 2 DHCP query...

SASHA v0.2.0 Mutiple XSS

Exploit Title: SASHA v0.2.0 Mutiple XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/sasha/files/ Version: 0.2.0 Category: webapps php Vulnerability When adding a new course to the schedule, the application relies on Client Side controls for input. This can easily be...

SASHA 0.2.0 Cross Site Scripting

Exploit Title: SASHA v0.2.0 Mutiple XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/sasha/files/ Version: 0.2.0 Category: webapps php Vulnerability When adding a new course to the schedule, the application relies on Client Side controls for input. This can easily be...

What is Your Risk Assessment Worth?

A risk assessment provides your organization with a tool to determine how, where and how much to invest in controls and security over technology. It also serves to document the risk acceptance policy of your organization as the acceptable level of risk dictates the level of controls to be...

JavaScript Switcharoo Proof Of Concept

/ Another whimsical browser proof-of-concept: http://lcamtuf.coredump.cx/switch/ It seems that relatively few people realize that holding a JavaScript handle to another window either because we opened it, or because the window was at some point displaying our content allows the attacker to tamper...

Internet Explorer Unsafe Scripting Misconfiguration Code Execution

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to improper configuration of the way Internet Explorer handles ActiveX controls. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web page...

Microsoft IE虚拟函数表格内存破坏漏洞(MS11-081)

BUGTRAQ ID: 49966 CVE ID: CVE-2011-2001 Microsoft Internet Explorer简称MSIE，是微软公司推出的一款网页浏览器。 IE在处理虚拟函数表格时在实现上存在内存破坏漏洞，远程攻击者可利用此漏洞远程代码，导致拒绝服务或执行任意指令。 攻击者可以保存使用IE利用漏洞的特制网站，然后诱使用户查看该网站。也可在应用或保存了IE渲染引擎的Office文档中嵌入ActiveX控件。然后利用受控站点存储或接受用户内容或广告，诱使用户点击电子邮件或即时消息的链接转到攻击者网站。 Microsoft Internet Explorer 9.x...

Parental Controls, 2.0, 3.0

It wasn’t until the second iteration of iOS that Apple got serious about what happens when children get their hands on their parents’ phones. With 2.0, parents were given the ability to block certain functions on their child’s handset including Safari, YouTube and whether or not anything could be...

Microsoft Office Web Components Arbitrary Code Execution (CVE-2009-1136)

A code execution vulnerability has been reported in Microsoft office web components. The vulnerability is due to insecure design of certain methods within ActiveX controls. A remote attacker may exploit this vulnerability by enticing a target user to open a malicious web-page. Successful...