Blake

The issue allows remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click. This is made possible by a vulnerability in an ActiveX control in IcoLaunch.dll.

The issue concerns the SUPERGRIDLib.SuperGrid ActiveX control, which does not properly restrict `ReplaceDBFile` method calls. This allows remote attackers to create or overwrite arbitrary files and subsequently execute arbitrary programs via the two pathname arguments. A directory traversal attack can be used to exploit this issue.

The issue concerns the KCHARTXYLib.KChartXY ActiveX control, which does not properly restrict `SaveToFile` method calls. This allows remote attackers to create or overwrite arbitrary files and subsequently execute arbitrary programs via a single pathname argument. A directory traversal attack can be used to exploit this issue.

The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the `comment`, `mac`, `graphtype`, `name`, or `type` parameter to "stats.php", or the `comment` parameter to "deviceadd.php".

A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the `status` parameter in the "deviceadd.php" file.

The issue is related to a stack-based buffer overflow in the RequestScreenOptimization function within the XProcessControl.ocx ActiveX control in msls31.dll. This allows remote attackers to execute arbitrary code by providing a long string in the first argument.

The issue concerns multiple buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved via the GetFromURL member or by providing a long argument to the `RasIsConnected` method.

The issue allows remote attackers to execute arbitrary code via a long playlist entry in a .m3u file. This is due to a buffer overflow in the software.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `username` parameter in the phpmylogon.php file.

The issue is a stack-based buffer overflow in the AntServer Module, allowing remote attackers to execute arbitrary code. This can be achieved by sending a long GET request to the "TCP port 6660" endpoint.