CVE-2021-38557

raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. The www-data account can execute /etc/raspap/hostapd/enablelog.sh as root with no password; however, the www-data account can also overwrite /etc/raspap/hostapd/enablelog.sh wit...

StudioLine Photo Basic ActiveX code execution

Unsafe EnableLog method...

StudioLine Photo Basic 3 ActiveX control Insecure Method

High-Tech Bridge SA Security Research Lab has discovered a vulnerability in StudioLine Photo Basic 3 ActiveX control, which can be exploited to overwrite arbitrary files. 1 Insecure method in StudioLine Photo Basic 3 ActiveX control The vulnerability is caused due to the NMSDVDX.DVDEngineX.1...

CVE-2008-4342

The CVE-2008-4342 issue concerns NuMedia Soft NMS DVD Burning SDK ActiveX control NMSDVDX.DVDEngineX.1 (version 1.013C and earlier) used in CDBurnerXP 4.2.1.976, BurnAware 2.1.3, Blaze Media Pro 8.02 Special Edition, and possibly other products. The underlying problem is that calls to EnableLog a...

NuMedia Soft Nms DVD Burning SDK - ActiveX 'NMSDVDX.dll' Command Execution

: DVDEngineX.Initialize True sLogFileName="C:\WINDOWS\PCHEALTH\HELPCTR\System\s...