Remote code execution

Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution...

CVE-2019-19167

CVE-2019-19167 affects Tobesoft Nexacro v2019.9.25.1 and earlier. The vulnerability is an arbitrary code execution flaw that can be triggered by using a method supported by the Nexacro14 ActiveX Control, enabling remote code execution. Affected component is Nexacro14 ActiveX within Nexacro, with ...