Detection of Dangerous ActiveX Control

This script will list all the vulnerable ActiveX controls installed on the remote windows machine with references and cause. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2009-0389

Multiple insecure method vulnerabilities in the Web On Windows WOW ActiveX control in WOW ActiveX 2 allow remote attackers to 1 create and overwrite arbitrary files via the WriteIniFileString method, 2 execute arbitrary programs via the ShellExecute method, 3 read from the registry via unspecifie...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the Web On Windows WOW ActiveX control in WOW ActiveX 2 allow remote attackers to 1 create and overwrite arbitrary files via the WriteIniFileString method, 2 execute arbitrary programs via the ShellExecute method, 3 read from the registry via unspecifie...

CVE-2009-0389

Multiple insecure method vulnerabilities in the Web On Windows WOW ActiveX control in WOW ActiveX 2 allow remote attackers to 1 create and overwrite arbitrary files via the WriteIniFileString method, 2 execute arbitrary programs via the ShellExecute method, 3 read from the registry via unspecifie...

CVE-2009-0389

WoW ActiveX 2.x is vulnerable to multiple remote code execution (RCE) vulnerabilities in the Web On Windows WOW ActiveX control. The CVE-2009-0389 description cites insecure methods (WriteIniFileString, ShellExecute) that can lead to arbitrary file writes or execution, and possible registry acces...

WOW - Web On Windows ActiveX Control 2 Remote Code Execution

No description provided by source. Written By Michael Brooks Special thanks to str0ke! software:WOW - Web On Windows ActiveX Control 2 - Remote Code Execution exploit type: Remote File Upload and Remote Code Execution Download:...

MW6 Barcode ActiveX控件远程缓冲区溢出漏洞

MW6 Barcode ActiveX是用于创建一维条码的工具。 MW6 Barcode ActiveX的实现上存在缓冲溢出漏洞，远程攻击者可能利用此漏洞控制用户客户端系统。 Barcode.MW6Barcode.1 ActiveX控件Barcode.dll在处理超长的Supplement参数数据时存在堆溢出问题，远程恶意网站可以通过包含超长参数的网页ActiveX调用在用户客户端系统上执行任意指令。 MW6 Technologies Barcode ActiveX 3.x 厂商补丁： MW6 Technologies ----------------...

Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting Exploits: YES Reported:...

Synactic ALL_IN_THE_BOX File Overwrite

DSECRG-09-006 Synactis AllINTHEBOX ActiveX Control - Null byte File Owervrite Synactis AllINTHEBOX ActiveX Control ALLINTHEBOX.OCX can be used to owervrite any any file in target system. Vulnerable method is "SaveDoc" Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL:...

Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln

Exploit for unknown platform in category remote exploits ================================================================ Synactis AllINTHEBOX ActiveX v3 Null byte File Overwrite Vuln ================================================================ Digital Security Research Group DSecRG Advisory...

Synactis All_IN_THE_BOX ActiveX 3.0 - Null Byte File Overwrite

Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting Exploits: YES Reported: 15.01.2009 Vendor response: NONE...

WOW - Web On Windows ActiveX Control 2 Remote Code Execution

Exploit for unknown platform in category remote exploits ============================================================ WOW - Web On Windows ActiveX Control 2 Remote Code Execution ============================================================ Written By Michael Brooks Special thanks to str0ke!...

Web On Windows Code Execution

Written By Michael Brooks Special thanks to str0ke! software:WOW - Web On Windows ActiveX Control 2 - Remote Code Execution exploit type: Remote File Upload and Remote Code Execution Download: http://www.download.com/WOW-Web-On-Windows-ActiveX-Control/3000-22064-10049976.html 183,682 downloads at...

WOW Web On Windows ActiveX Control 2 - Remote Code Execution

WOW Web On Windows ActiveX Control 2 - Remote Code Execution Written By Michael Brooks Special thanks to str0ke! software:WOW - Web On Windows ActiveX Control 2 - Remote Code Execution exploit type: Remote File Upload and Remote Code Execution Download:...

WOW Web On Windows ActiveX Control 2 - Remote Code Execution

Written By Michael Brooks Special thanks to str0ke! software:WOW - Web On Windows ActiveX Control 2 - Remote Code Execution exploit type: Remote File Upload and Remote Code Execution Download: http://www.download.com/WOW-Web-On-Windows-ActiveX-Control/3000-22064-10049976.html 183,682 downloads at...

CVE-2009-0298

Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control Barcode.MW6Barcode.1, Barcode.dll 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property...

Heap overflow

Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control Barcode.MW6Barcode.1, Barcode.dll 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property...

CVE-2009-0298

CVE-2009-0298 describes a heap-based buffer overflow in the MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) version 3.0.0.1. The overflow is triggered by a long Supplement property and allows remote attackers to execute arbitrary code. Multiple sources confirm the vul...

CVE-2009-0298: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in MW6 Technologies Barcode ActiveX control Barcode.MW6Barcode.1, Barcode.dll 3.0.0.1 allows remote attackers to execute arbitrary code via a long Supplement property...

HtmlCapture 2.0 File Overwrite

Exploited By : Cyber-Zone ! Founded By : Cyber-Zone ABDELKHALEK ! E-----Mail : [email protected] ! Home------ : WwW.ArabiC-M.CoM ! GreeTz -To : $ Hussin X ; $ The5p3ctrum ; $ BayHay ; $ JiKo ; $ StaCk ; Dns Team ; TrYaG -------------- : IQ-SecuriTY Members ; All MoroCCaN HaCkerS . & I don...