CVE-2021-26613

CVE-2021-26613 affects the Nexacro framework. The vulnerability arises from improper input validation in Nexacro that permits copying a file to the startup folder via the rename method. Impact is described in sources as potentially enabling arbitrary file creation or modification in startup-relat...

CVE-2021-26625

The CVE-2021-26625 entry concerns the Nexacro platform (Tobesoft Nexacro). The root cause is an automatic update feature that does not verify input data beyond version information, enabling a remote attacker to download and execute arbitrary malicious files. Public details specify Nexacro/17.x va...

CVE-2020-7874

The CVE-2020-7874 entry relates to the NEXACRO14 Runtime ActiveX control from Tobesoft Co., Ltd. Affected component: NEXACRO14 Runtime ActiveX control. Root cause: incomplete validation of the file download URL or file extension. Consequence: enables arbitrary file download and execution. Exploit...

CVE-2021-26607

CVE-2021-26607 : Affects Tobesoft Nexacro18/NEXACRO17 (as referenced in multiple outlets); vulnerability arises from improper input validation in the execDefaultBrowser method, allowing a remote attacker to execute arbitrary commands on affected systems. CVSS data from NVD indicates high-severity...

CVE-2021-26612

The CVE-2021-26612 issue affects the Nexacro platform and is caused by improper input validation in the copy method, enabling arbitrary file creation and allowing a remote attacker to execute arbitrary commands after the malicious code is written. Multiple sources (NVD entry and related catalogs)...

CVE-2019-19167

CVE-2019-19167 affects Tobesoft Nexacro v2019.9.25.1 and earlier. The vulnerability is an arbitrary code execution flaw that can be triggered by using a method supported by the Nexacro14 ActiveX Control, enabling remote code execution. Affected component is Nexacro14 ActiveX within Nexacro, with ...