deardaniel/secdata-raw huggingface dataset:
Metasploit Module: Oracle Weblogic Server Deserialization RCE
Type: exploit
Path: modules/exploits/multi/misc/weblogic_deserialize.rb
Platform: unix
Disclosure date: 2018-04-17
References: CVE-2018-2628, EDB-44553

Description:
An unauthenticated attacker with network access to the Oracle Weblogic
          Server T3 interface can send a serialized object to the interface to
          execute code on vulnerable hosts.

Check method (fingerprinting):
connect
    req = "GET /console/login/LoginForm.jsp HTTP/1.1\n"
    req << "Host: #{peer}\n\n"
    sock.put(req)

    res = sock.get_once
    disconnect
    return CheckCode::Unknown('No response received from target') unless res

    /WebLogic Server Version: (?<version>\d+\.\d+\.\d+\.*\d*)/ =~ res
    if version
      version = Rex::Version.new(version)
      vprint_good("Detected Oracle WebLogic Server Version: #{version.to_s}")

      case
      when version.to_s.start_with?('10.3')
        return CheckCode::Appears("WebLogic version #{version} appears vulnerable") unless version > Rex::Version.new('10.3.6.0')
      when version.to_s.start_with?('12.1')
        return CheckCode::Appears("WebLogic version #{version} appears vulnerable") unless version > Rex::Version.new('12.1.3.0')
      when version.to_s.start_with?('12.2')
        return CheckCode::Appears("WebLogic version #{version} appears vulnerable") unless version > Rex::Version.new('12.2.1.3')
      end
    end

    if res.include?('Oracle WebLogic Server Administration Console')
      return CheckCode::Detected('Oracle WebLogic Server Administration Console detected')
    end

    CheckCode::Unknown('Target does not appear to be Oracle WebLogic Server')
  end
Metasploit Module: BMC Server Automation RSCD Agent NSH Remote
Type: exploit
Path: modules/exploits/multi/misc/bmc_server_automation_rscd_nsh_rce.rb
Platform: win
Disclosure date: 2016-03-16
References: URL-https://insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/, URL-https://nickbloor.co.uk/2018/01/01/rce-with-bmc-server-automation/, URL-https://nickbloor.co.uk/2018/01/08/improving-the-bmc-rscd-rce-exploit/, CVE-2016-1542, CVE-2016-1543
Targets: Generic Command

Description:
This module exploits a weak access control check in the BMC Server
          Automation RSCD agent that allows arbitrary operating system commands
          to be executed without authentication.
          Note: Under Windows, non-powershell commands may need to be prefixed
          with 'cmd /c'.

Check method (fingerprinting):
# Send agentinfo request and check result
    vprint_status('Checking for BMC with agentinfo request.')
    res = send_agentinfo_request

    # Check for successful platform detection
    if res[0] == 1
      vprint_good('BMC RSCD agent detected, platform appears to be ' + res[1])
      return CheckCode::Detected('BMC RSCD agent detected')
    end

    # Get first four bytes of the packet which should hold the content length
    res_len = res[1] && res[1].length > 3 ? res[1][0..3].unpack('N')[0] : 0

    # Return unknown if the packet format appears correct (length field check)
    if res[1] && res[1].length - 4 == res_len
      vprint_warning('Target appears to be BMC, however an unexpected ' \
                     'agentinfo response was returned.')
      vprint_warning('Response: ' + res[1])
      return CheckCode::Unknown('Could not determine the target state')
    end

    # Invalid response, probably not a BMC RSCD target
    vprint_error('The target does not appear to be a BMC RSCD agent.')
    vprint_error('Response: ' + res[1]) if res[1]
    CheckCode::Safe('The target is not vulnerable')
  end
Metasploit Module: Metasploit msfd Remote Code Execution
Type: exploit
Path: modules/exploits/multi/misc/msfd_rce_remote.rb
Platform: "ruby"
Disclosure date: 2018-04-11
Authors: Robin Stenvi <robin.stenvi[at]gmail.com>

Description:
Metasploit's msfd-service makes it possible to get a msfconsole-like
          interface over a TCP socket. If this socket is accessible on a remote
          interface, an attacker can execute commands on the victim's machine.

          If msfd is running with higher privileges than the current local user,
          this module can also be used for privilege escalation. In that case,
          port forwarding on the compromised host can be used.

          Code execution is achieved with the msfconsole command: irb -e 'CODE'.

Check method (fingerprinting):
connect
    data = sock.get_once
    if data.nil?
      disconnect
      return Exploit::CheckCode::Unknown('No response received from target')
    end
    if data.include?("msf")
      disconnect
      return Exploit::CheckCode::Appears('Target appears to be running msfd')
    end
    disconnect
    return Exploit::CheckCode::Unknown('msfd service not detected')
  end
Metasploit Module: Portable UPnP SDK unique_service_name() Remote Code Execution
Type: exploit
Path: modules/exploits/multi/upnp/libupnp_ssdp_overflow.rb
Platform: unix
Disclosure date: 2013-01-29
References: CVE-2012-5958, OSVDB-89611, US-CERT-VU-922681, URL-https://www.rapid7.com/blog/post/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play

Description:
This module exploits a buffer overflow in the unique_service_name()
          function of libupnp's SSDP processor. The libupnp library is used across
          thousands of devices and is referred to as the Intel SDK for UPnP
          Devices or the Portable SDK for UPnP Devices.

          Due to size limitations on many devices, this exploit uses a separate TCP
          listener to stage the real payload.
Metasploit Module: NTP Daemon readvar Buffer Overflow
Type: exploit
Path: modules/exploits/multi/ntp/ntp_overflow.rb
Disclosure date: 2001-04-04
Authors: aushack
References: CVE-2001-0414, OSVDB-805, BID-2540, US-CERT-VU-970472

Description:
This module exploits a stack based buffer overflow in the
          ntpd and xntpd service. By sending an overly long 'readvar'
          request it is possible to execute code remotely. As the stack
          is corrupted, this module uses the Egghunter technique.
Metasploit Module: Tincd Post-Authentication Remote TCP Stack Buffer Overflow
Type: exploit
Path: modules/exploits/multi/vpn/tincd_bof.rb
Platform: win
Disclosure date: 2013-04-22
References: CVE-2013-1428, OSVDB-92653, BID-59369, URL-http://www.floyd.ch/?p=741, URL-http://sitsec.net/blog/2013/04/22/stack-based-buffer-overflow-in-the-vpn-software-tinc-for-authenticated-peers/

Description:
This module exploits a stack buffer overflow in Tinc's tincd
          service. After authentication, a specially crafted tcp packet (default port 655)
          leads to a buffer overflow and allows to execute arbitrary code. This module has
          been tested with tinc-1.1pre6 on Windows XP (custom calc payload) and Windows 7
          (windows/meterpreter/reverse_tcp), and tinc version 1.0.19 from the ports of
          FreeBSD 9.1-RELEASE # 0 and various other OS, see targets. The exploit probably works
          for all versions <= 1.1pre6.
          A manually compiled version (1.1.pre6) on Ubuntu 12.10 with gcc 4.7.2 seems to
          be a non-exploitable crash due to calls to __memcpy_chk depending on how tincd
          was compiled. Bug got fixed in version 1.0.21/1.1pre7. While writing this module
          it was recommended to the maintainer to start using DEP/ASLR and other protection
          mechanisms.
Metasploit Module: Firefox toString console.time Privileged Javascript Injection
Type: exploit
Path: modules/exploits/multi/browser/firefox_tostring_console_injection.rb
Platform: firefox
Disclosure date: 2013-05-14
References: CVE-2013-1710
Targets: Universal (Javascript XPCOM Shell)

Description:
This exploit gains remote code execution on Firefox 15-22 by abusing two separate
          Javascript-related vulnerabilities to ultimately inject malicious Javascript code
          into a context running with chrome:// privileges.
Metasploit Module: Firefox 17.0.1 Flash Privileged Code Injection
Type: exploit
Path: modules/exploits/multi/browser/firefox_svg_plugin.rb
Platform: firefox
Disclosure date: 2013-01-08
References: CVE-2013-0758, CVE-2013-0757, OSVDB-89019, OSVDB-89020, URL-http://www.mozilla.org/security/announce/2013/mfsa2013-15.html, URL-https://bugzilla.mozilla.org/show_bug.cgi?id=813906
Targets: Universal (Javascript XPCOM Shell)

Description:
This exploit gains remote code execution on Firefox 17 and 17.0.1, provided
          the user has installed Flash. No memory corruption is used.

          First, a Flash object is cloned into the anonymous content of the SVG
          "use" element in the <body> (CVE-2013-0758). From there, the Flash object
          can navigate a child frame to a URL in the chrome:// scheme.

          Then a separate exploit (CVE-2013-0757) is used to bypass the security wrapper
          around the child frame's window reference and inject code into the chrome://
          context. Once we have injection into the chrome execution context, we can write
          the payload to disk, chmod it (if posix), and then execute.

          Note: Flash is used here to trigger the exploit but any Firefox plugin
          with script access should be able to trigger it.
Metasploit Module: Apple QTJava toQTPointer() Arbitrary Memory Access
Type: exploit
Path: modules/exploits/multi/browser/qtjava_pointer.rb
Platform: win
Disclosure date: 2007-04-23
References: CVE-2007-2175, OSVDB-34178, BID-23608, ZDI-07-023
Targets: Quicktime 7 on Windows x86, Quicktime 7 on Mac OS X PPC, Quicktime 7 on Mac OS X x86

Description:
This module exploits an arbitrary memory access vulnerability in the
          Quicktime for Java API provided with Quicktime 7.
Metasploit Module: Java Applet Reflection Type Confusion Remote Code Execution
Type: exploit
Path: modules/exploits/multi/browser/java_jre17_reflection_types.rb
Platform: java
Disclosure date: 2013-01-10
References: CVE-2013-2423, OSVDB-92348, BID-59162, URL-http://weblog.ikvm.net/PermaLink.aspx?guid=acd2dd6d-1028-4996-95df-efa42ac237f0, URL-http://www.oracle.com/technetwork/topics/security/javacpuapr2[PII_REDACTED].html, URL-http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b453d9be6b3f, URL-http://immunityproducts.blogspot.com/2013/04/yet-another-java-security-warning-bypass.html
Targets: Generic (Java Payload), Windows x86 (Native Payload), Mac OS X x86 (Native Payload), Linux x86 (Native Payload)

Description:
This module abuses Java Reflection to generate a Type Confusion, due to a weak
          access control when setting final fields on static classes, and run code outside of
          the Java Sandbox. The vulnerability affects Java version 7u17 and earlier. This
          exploit bypasses click-to-play throw a specially crafted JNLP file. This bypass is
          applied mainly to IE, when Java Web Start can be launched automatically throw the
          ActiveX control. Otherwise the applet is launched without click-to-play bypass.
Metasploit Module: Java Applet Rhino Script Engine Remote Code Execution
Type: exploit
Path: modules/exploits/multi/browser/java_rhino.rb
Platform: win
Disclosure date: 2011-10-18
References: CVE-2011-3544, OSVDB-76500, ZDI-11-305, URL-http://schierlm.users.sourceforge.net/CVE-2011-3544.html
Targets: Generic (Java Payload), Windows Universal, Linux x86

Description:
This module exploits a vulnerability in the Rhino Script Engine that
          can be used by a Java Applet to run arbitrary Java code outside of
          the sandbox.  The vulnerability affects version 7 and version 6 update
          27 and earlier, and should work on any browser that supports Java
          (for example: IE, Firefox, Google Chrome, etc)
Metasploit Module: Metasploit msfd Remote Code Execution via Browser
Type: exploit
Path: modules/exploits/multi/browser/msfd_rce_browser.rb
Platform: ruby
Disclosure date: 2018-04-11
Authors: Robin Stenvi <robin.stenvi[at]gmail.com>

Description:
Metasploit's msfd-service makes it possible to get a msfconsole-like
          interface over a TCP socket. This module connects to the msfd-socket
          through the victim's browser.

          To execute msfconsole-commands in JavaScript from a web application,
          this module places the payload in the POST-data. These POST-requests
          can be sent cross-domain and can therefore be sent to localhost on the
          victim's machine. The msfconsole-command to execute code is 'rbi -e
          "CODE"'.

          Exploitation when the browser is running on Windows is unreliable and
          the exploit is only usable when IE is used and the quiet-flag has been
          passed to msf-daemon.
Metasploit Module: Adobe Flash Player Drawing Fill Shader Memory Corruption
Type: exploit
Path: modules/exploits/multi/browser/adobe_flash_shader_drawing_fill.rb
Platform: win
Disclosure date: 2015-05-12
References: CVE-2015-3105, URL-https://helpx.adobe.com/security/products/flash-player/apsb15-11.html, URL-http://blog.trendmicro.com/trendlabs-security-intelligence/magnitude-exploit-kit-uses-newly-patched-adobe-vulnerability-us-canada-and-uk-are-most-at-risk/, URL-http://malware.dontneedcoffee.com/2015/06/cve-2015-3105-flash-up-to-1700188-and.html, URL-http://help.adobe.com/en_US/as3/dev/WSFDA04BAE-F6BC-43d9-BD9C-08D39CA22086.html

Description:
This module exploits a memory corruption happening when applying a Shader as a drawing fill
          as exploited in the wild on June 2015. This module has been tested successfully on:

          Windows 7 SP1 (32-bit), IE11 and Adobe Flash 17.0.0.188,
          Windows 7 SP1 (32-bit), Firefox 38.0.5 and Adobe Flash 17.0.0.188,
          Windows 8.1, Firefox 38.0.5 and Adobe Flash 17.0.0.188, and
          Linux Mint "Rebecca" (32 bits), Firefox 33.0 and Adobe Flash 11.2.202.460.
Metasploit Module: Adobe Flash Player ByteArray Use After Free
Type: exploit
Path: modules/exploits/multi/browser/adobe_flash_hacking_team_uaf.rb
Platform: win
Disclosure date: 2015-07-06
References: CVE-2015-5119, URL-https://helpx.adobe.com/security/products/flash-player/apsa15-03.html, URL-http://blog.trendmicro.com/trendlabs-security-intelligence/unpatched-flash-player-flaws-more-pocs-found-in-hacking-team-leak/, URL-https://twitter.com/w3bd3vil/status/[PII_REDACTED]08962816

Description:
This module exploits an use after free on Adobe Flash Player. The vulnerability,
          discovered by Hacking Team and made public as part of the July 2015 data leak, was
          described as an Use After Free while handling ByteArray objects. This module has
          been tested successfully on:

          Windows 7 SP1 (32-bit), IE11 and Adobe Flash 18.0.0.194,
          Windows 7 SP1 (32-bit), Firefox 38.0.5 and Adobe Flash 18.0.0.194,
          Windows 8.1 (32-bit), IE11 and Adobe Flash 18.0.0.194,
          Windows 8.1 (32-bit), Firefox and Adobe Flash 18.0.0.194, and
          Linux Mint "Rebecca" (32 bits), Firefox 33.0 and Adobe Flash 11.2.202.468.
Metasploit Module: Sun Java Calendar Deserialization Privilege Escalation
Type: exploit
Path: modules/exploits/multi/browser/java_calendar_deserialize.rb
Platform: %w(linux osx solaris win)
Disclosure date: 2008-12-03
References: CVE-2008-5353, OSVDB-50500, URL-http://slightlyrandombrokenthoughts.blogspot.com/2008/12/calendar-bug.html, URL-http://landonf.bikemonkey.org/code/macosx/CVE-2008-5[PII_REDACTED]9.html, URL-http://blog.cr0.org/2009/05/write-once-own-everyone.html
Targets: Generic (Java Payload), Windows x86 (Native Payload), Mac OS X PPC (Native Payload), Mac OS X x86 (Native Payload), Linux x86 (Native Payload)

Description:
This module exploits a flaw in the deserialization of Calendar objects in the Sun JVM.

          The payload can be either a native payload which is generated as an executable and
          dropped/executed on the target or a shell from within the Java applet in the target browser.

          The affected Java versions are JDK and JRE 6 Update 10 and earlier, JDK and JRE 5.0 Update 16
          and earlier, SDK and JRE 1.4.2_18 and earlier (SDK and JRE 1.3.1 are not affected).
Metasploit Module: Adobe Flash Player ShaderJob Buffer Overflow
Type: exploit
Path: modules/exploits/multi/browser/adobe_flash_shader_job_overflow.rb
Platform: win
Disclosure date: 2015-05-12
References: CVE-2015-3090, URL-https://helpx.adobe.com/security/products/flash-player/apsb15-09.html, URL-https://www.fireeye.com/blog/threat-research/2015/05/angler_ek_exploiting.html, URL-http://malware.dontneedcoffee.com/2015/05/cve-2015-3090-flash-up-to-1700169-and.html, URL-http://www.brooksandrus.com/blog/2009/03/11/bilinear-resampling-with-flash-player-and-pixel-bender/

Description:
This module exploits a buffer overflow vulnerability related to the ShaderJob workings on
          Adobe Flash Player. The vulnerability happens when trying to apply a Shader setting up the
          same Bitmap object as src and destination of the ShaderJob. Modifying the "width" attribute
          of the ShaderJob after starting the job it's possible to create a buffer overflow condition
          where the size of the destination buffer and the length of the copy are controlled. This
          module has been tested successfully on:

          Windows 7 SP1 (32-bit), IE11 and Adobe Flash 17.0.0.169,
          Windows 7 SP1 (32-bit), Firefox 38.0.5 and Adobe Flash 17.0.0.169,
          Windows 8.1, Firefox 38.0.5 and Adobe Flash 17.0.0.169, and
          Linux Mint "Rebecca" (32 bits), Firefox 33.0 and Adobe Flash 11.2.202.457.
Metasploit Module: Java Applet JMX Remote Code Execution
Type: exploit
Path: modules/exploits/multi/browser/java_jre17_jmxbean.rb
Platform: java
Disclosure date: 2013-01-10
References: CVE-2013-0422, OSVDB-89059, US-CERT-VU-625617, URL-http://malware.dontneedcoffee.com/2013/01/0-day-17u10-spotted-in-while-disable.html, URL-http://labs.alienvault.com/labs/index.php/2013/new-year-new-java-zeroday/, URL-http://pastebin.com/cUG2ayjh
Targets: Generic (Java Payload), Windows x86 (Native Payload), Mac OS X x86 (Native Payload), Linux x86 (Native Payload)

Description:
This module abuses the JMX classes from a Java Applet to run arbitrary Java
          code outside of the sandbox as exploited in the wild in January of 2013. The
          vulnerability affects Java version 7u10 and earlier.
Metasploit Module: Sun Java JRE getSoundbank file:// URI Buffer Overflow
Type: exploit
Path: modules/exploits/multi/browser/java_getsoundbank_bof.rb
Platform: %w{ linux osx win }
Disclosure date: 2009-11-04
References: CVE-2009-3867, OSVDB-59711, BID-36881, ZDI-09-076
Targets: J2SE 1.6_16 on Windows x86, J2SE 1.6_16 on Mac OS X PPC, J2SE 1.6_16 on Mac OS X x86

Description:
This module exploits a flaw in the getSoundbank function in the Sun JVM.

          The payload is serialized and passed to the applet via PARAM tags. It must be
          a native payload.

          The effected Java versions are JDK and JRE 6 Update 16 and earlier,
          JDK and JRE 5.0 Update 21 and earlier, SDK and JRE 1.4.2_23 and
          earlier, and SDK and JRE 1.3.1_26 and earlier.

          NOTE: Although all of the above versions are reportedly vulnerable, only
          1.6.0_u11 and 1.6.0_u16 on Windows XP SP3 were tested.
Metasploit Module: Sun Java JRE AWT setDiffICM Buffer Overflow
Type: exploit
Path: modules/exploits/multi/browser/java_setdifficm_bof.rb
Platform: %w{ linux osx win }
Disclosure date: 2009-11-04
References: CVE-2009-3869, OSVDB-59710, BID-36881, ZDI-09-078
Targets: J2SE 1.6_16 on Windows x86, J2SE 1.6_16 on Mac OS X PPC, J2SE 1.6_16 on Mac OS X x86

Description:
This module exploits a flaw in the setDiffICM function in the Sun JVM.

          The payload is serialized and passed to the applet via PARAM tags. It must be
          a native payload.

          The effected Java versions are JDK and JRE 6 Update 16 and earlier,
          JDK and JRE 5.0 Update 21 and earlier, SDK and JRE 1.4.2_23 and
          earlier, and SDK and JRE 1.3.1_26 and earlier.

          NOTE: Although all of the above versions are reportedly vulnerable, only
          1.6.0_u11 and 1.6.0_u16 on Windows XP SP3 were tested.
Metasploit Module: Firefox 5.0 - 15.0.1 __exposedProps__ XCS Code Execution
Type: exploit
Path: modules/exploits/multi/browser/firefox_proto_crmfrequest.rb
Disclosure date: 2013-08-06
References: CVE-2012-3993, URL-https://bugzilla.mozilla.org/show_bug.cgi?id=768101, CVE-2013-1710

Description:
On versions of Firefox from 5.0 to 15.0.1, the InstallTrigger global, when given
          invalid input, would throw an exception that did not have an __exposedProps__
          property set. By re-setting this property on the exception object's prototype,
          the chrome-based defineProperty method is made available.

          With the defineProperty method, functions belonging to window and document can be
          overridden with a function that gets called from chrome-privileged context. From here,
          another vulnerability in the crypto.generateCRMFRequest function is used to "peek"
          into the context's private scope. Since the window does not have a chrome:// URL,
          the insecure parts of Components.classes are not available, so instead the AddonManager
          API is invoked to silently install a malicious plugin.
Metasploit Module: Firefox Proxy Prototype Privileged Javascript Injection
Type: exploit
Path: modules/exploits/multi/browser/firefox_proxy_prototype.rb
Platform: firefox
Disclosure date: 2014-01-20
References: CVE-2014-8636, CVE-2015-0802, URL-https://bugzilla.mozilla.org/show_bug.cgi?id=1120261, URL-https://www.rapid7.com/blog/post/2015/03/23/r7-2015-04-disclosure-mozilla-firefox-proxy-prototype-rce-cve-2014-8636
Targets: Universal (Javascript XPCOM Shell)

Description:
This exploit gains remote code execution on Firefox 31-34 by abusing a bug in the XPConnect
          component and gaining a reference to the privileged chrome:// window. This exploit
          requires the user to click anywhere on the page to trigger the vulnerability.
Metasploit Module: Adobe Flash Player Shader Buffer Overflow
Type: exploit
Path: modules/exploits/multi/browser/adobe_flash_pixel_bender_bof.rb
Platform: win
Disclosure date: 2014-04-28
References: CVE-2014-0515, BID-67092, URL-http://helpx.adobe.com/security/products/flash-player/apsb14-13.html, URL-http://www.securelist.com/en/blog/8212/New_Flash_Player_0_day_CVE_2014_0515_used_in_watering_hole_attacks, URL-http://blog.trendmicro.com/trendlabs-security-intelligence/analyzing-cve-2014-0515-the-recent-flash-zero-day/

Description:
This module exploits a buffer overflow vulnerability in Adobe Flash Player. The
          vulnerability occurs in the flash.Display.Shader class, when setting specially
          crafted data as its bytecode, as exploited in the wild in April 2014. This module
          has been tested successfully on the following operating systems and Flash versions:

          Windows 7 SP1, IE 8 to IE 11 with Flash 13.0.0.182,
          Windows 7 SP1, Firefox 38.0.5, Flash 11.7.700.275 and Adobe Flash 13.0.0.182,
          Windows 8.1, Firefox 38.0.5 and Adobe Flash 13.0.0.182,
          Linux Mint "Rebecca" (32 bit), Firefox 33.0 and Adobe Flash 11.2.202.350
Metasploit Module: Java Applet Driver Manager Privileged toString() Remote Code Execution
Type: exploit
Path: modules/exploits/multi/browser/java_jre17_driver_manager.rb
Platform: java
Disclosure date: 2013-01-10
References: CVE-2013-1488, OSVDB-91472, BID-58504, URL-http://www.contextis.com/research/blog/java-pwn2own/, URL-http://immunityproducts.blogspot.com/2013/04/yet-another-java-security-warning-bypass.html, ZDI-13-076
Targets: Generic (Java Payload), Windows x86 (Native Payload), Mac OS X x86 (Native Payload), Linux x86 (Native Payload)

Description:
This module abuses the java.sql.DriverManager class where the toString() method
          is called over user supplied classes from a doPrivileged block. The vulnerability
          affects Java version 7u17 and earlier. This exploit bypasses click-to-play on Internet Explorer
          and throws a specially crafted JNLP file. This bypass is applicable mainly to IE, where Java
          Web Start can be launched automatically through the ActiveX control. Otherwise, the
          applet is launched without click-to-play bypass.