EUVD-2021-13401

Malware in sbrugna...

CVE-2021-26607

An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems...

Input validation

An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems...

CVE-2021-26607 TOBESOFT NEXACRO17 arbitrary command execution vulnerability

An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems...

CVE-2021-26607

CVE-2021-26607 : Affects Tobesoft Nexacro18/NEXACRO17 (as referenced in multiple outlets); vulnerability arises from improper input validation in the execDefaultBrowser method, allowing a remote attacker to execute arbitrary commands on affected systems. CVSS data from NVD indicates high-severity...

CVE-2020-7820

Nexacro14/17 ExtCommonApiV13 Library under 2019.9.6 version contain a vulnerability that could allow remote attacker to execute arbitrary code by setting the arguments to the vulnerable API. This can be leveraged for code execution by rebooting the victim’s PC...