CVE-2009-2386

Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method...

CVE-2009-2169

CVE-2009-2169: In Edraw PDF Viewer Component, the PDFVIEWER.PDFViewerCtrl.1 ActiveX control (pdfviewer.ocx) before 3.2.0.126 contains an insecure method vulnerability. An attacker can remotely create and overwrite arbitrary files by passing a URL argument to FtpConnect and a target filename to Ft...

dvbbs delete the upload. inc after the shell was a method-vulnerability warning-the black bar safety net

dvbbs delete the upload. inc after the shell was a method - the premise is to give the front Desk administrative privileges Into the background after Go to the user management Just change the personal e-mail address for %eval requestchr3 5%@163.com After saving Find the mail list export Then expo...

CVE-2008-4830

Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 KWEDIT.DLL 6400.1.1.41 and 7.10 Patch 5 KWEDIT.DLL 7100.1.1.43 allows remote attackers to 1 overwrite arbitrary files via the SaveDocumentAs method or 2 read or execute arbitrary files via the OpenDocument method...

CVE-2009-0218

CVE-2009-0218 involves Particle Software’s IntraLaunch ActiveX control (IntraLaunch.ocx) used by LDRA TBbrowse. The ActiveX control is not restricted to any domain/zone and is marked Safe for Scripting, enabling web pages to trigger arbitrary code execution on affected systems. Exploitation could...

Security feature bypass

Insecure method vulnerability in the Versalsoft HTTP Image Uploader ActiveX control UUploaderSvrD.dll 6.0.0.35 allows remote attackers to delete arbitrary files via the RemoveFileOrDir method...

Security feature bypass

Insecure method vulnerability in the VSPDFEditorX.VSPDFEdit ActiveX control in VSPDFEditorX.ocx 1.0.200.0 in VISAGESOFT eXPert PDF EditorX allows remote attackers to create or overwrite arbitrary files via the first argument to the extractPagesToFile method...

CVE-2008-6442

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Design/Logic Flaw

Insecure method vulnerability in the ImeraIEPlugin ActiveX control ImeraIEPlugin.dll 1.0.2.54 in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters...

CVE-2009-0811

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...

CVE-2009-0811

CVE-2009-0811 describes an insecure method vulnerability in the SopCast SopCore ActiveX control (sopocx.ocx 3.0.3.501). The vulnerability allows remote attackers to cause arbitrary code execution by supplying an executable file name to the SetExternalPlayer method. Affected product: SopCast SopCo...

CVE-2009-0811

Insecure method vulnerability in the SopCast SopCore ActiveX control in sopocx.ocx 3.0.3.501 allows remote attackers to execute arbitrary programs via an executable file name in the argument to the SetExternalPlayer method...

Nokia N95-8 browser - 'setAttributeNode' Method Crash

Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The nokia n95 is a smartphone, this phone have more tools, for example:...

Design/Logic Flaw

Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable...

CVE-2008-5404

Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable...

CVE-2008-2432

CVE-2008-2432 affects Novell iPrint Client before 5.06 through an insecure GetFileList method in an unspecified ActiveX control, allowing remote attackers to enumerate image files in arbitrary directories. Remediation: update to version 5.06 (per Secunia Secura advisory). Other sources corroborat...

Security feature bypass

Insecure method vulnerability in the ChilkatCrypt2.ChilkatCrypt2.1 ActiveX control ChilkatCrypt2.dll 4.3.2.1 in Chilkat Crypt ActiveX Component allows remote attackers to create and overwrite arbitrary files via the WriteFile method. NOTE: this could be leveraged for code execution by creating...

CVE-2008-4919

Product affected: Visagesoft eXPert PDF Viewer ActiveX Control (VSPDFViewerX.ocx) 3.0.990.0. Vulnerability: ActiveX Control based file overwrite vulnerability that allows a remote attacker to overwrite arbitrary files by supplying a full pathname to the savePageAsBitmap method. Root cause / vecto...

CVE-2008-4699

Insecure method vulnerability in the ActiveX control PAWWeb11.ocx in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method...

CVE-2008-4699

The CVE-2008-4699 entry concerns Peachtree Accounting 2004, specifically the ActiveX control PAWWeb11.ocx. The vulnerability arises in the ExecutePreferredApplication method, enabling remote attackers to execute arbitrary programs. The available connected documents affirm this insecure method vul...