EIP-2026-119151

This HTML-based exploit leverages an insecure ActiveX method (StartVideoSaving) in SmartVmd ActiveX V 1.1 to delete arbitrary files on the victim's system. The exploit uses a simple JavaScript function to trigger the vulnerable method when a button is clicked.