Black Ice Fax Voice SDK 12.6 - Remote Code Execution

: Theres an integer overflow in this section of fax.ocx which is how i found the dereference vulnerability. 1000CFA3 MOV ECX,EBP+8 51EC8B55 EAX 1000CF82 - 51EC8B55 EBX 0013EC68 - 01D29E90 ECX FFFFFFFF EDX 73F360D3 - EB0C4589 EDI 0013EB98 - 73F4D682 ESI 00000000 EBP 0013EB94 - 0013EC10 ESP 0013EB9...

RealNetworks RealGames StubbyUtil.ProcessMgr.1 ActiveX Control (InstallerDlg.dll v2.6.0.445) Multiple Remote Commands Execution Vulnerabilities

RealNetworks RealGames StubbyUtil.ProcessMgr.1 ActiveX Control InstallerDlg.dll v2.6.0.445 Multiple Remote Commands Execution Vulnerabilities tested against Internet Explorer 9, Vista sp2 download url: http://www.gamehouse.com/ background: When choosing to play with theese online games ex. the ga...

Cisco Secure Desktop CSDWebInstaller code exec

Added: 03/23/2011 CVE: CVE-2011-0926 BID: 46536 OSVDB: 63809 Background Cisco Secure Desktop is an endpoint security management product that consists of several components, such as Prelogin Assessment/Policies, Host Scan, Cache Cleaner, Secure Desktop Vault, etc. Problem Cisco Secure Desktop...

Cisco Secure Desktop CSDWebInstaller code exec

Added: 03/23/2011 CVE: CVE-2011-0926 BID: 46536 OSVDB: 63809 Background Cisco Secure Desktop is an endpoint security management product that consists of several components, such as Prelogin Assessment/Policies, Host Scan, Cache Cleaner, Secure Desktop Vault, etc. Problem Cisco Secure Desktop...

Cisco Secure Desktop CSDWebInstaller code exec

Added: 03/23/2011 CVE: CVE-2011-0926 BID: 46536 OSVDB: 63809 Background Cisco Secure Desktop is an endpoint security management product that consists of several components, such as Prelogin Assessment/Policies, Host Scan, Cache Cleaner, Secure Desktop Vault, etc. Problem Cisco Secure Desktop...

AoA DVD Creator 2.5 - ActiveX Stack Overflow

Exploit Title: AoA DVD Creator V2.5 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/aoadvdcreator.exe Version: v2.5 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 mail---- shogilord^gmail.com spams are...

AoA Mp4 Converter 4.1.0 - ActiveX Stack Overflow

Exploit Title: AoA Mp4 converter v4.1.0 Activex Date: Febrary 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.aoamedia.com/AoAMP4Converter.exe Version: v4.1.0 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 mail---- shogilord^gmail.com spams are...

HP Photo Creative v 2.x audio.Record.1 ActiveX Control (ContentMan.dll 1.0.0.4272) Remote Stack Based Buffer Overflow poc

!-- HP Photo Creative v 2.x audio.Record.1 ActiveX Control ContentMan.dll 1.0.0.4272 Remote Stack Based Buffer Overflow poc by rgod tested against Windows Vista / IE 7 download url: http://www.hp.com/global/us/en/consumer/digitalphotography/free/software/photo-creations.html activex settings:...

HP Photo Creative 2.x Active-X Control Buffer Overflow

//add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

HP Photo Creative 2.x audio.Record.1 - ActiveX Control Remote Stack Buffer Overflow

//add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

Image Viewer CP Gold 6 Buffer Overflow

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Crystal Report Viewer 8.0.0.371 Denial Of Service

Crystal Reporting Viewer v8.0.0.371 Author: Matthew Bergin Website: www.berginpentesting.com Website: www.smashthestack.org targetFile = "C:\WINDOWS\system32\crviewer.dll" prototype = "Sub SearchByFormula ByVal formula As String " memberName = "SearchByFormula" progid = "CRVIEWERLib.CRViewer"...

AoAAudioExtractor 2.0.0.0 - ActiveX (PoC) (SEH)

AoAAudioExtractor 2.0.0.0 - ActiveX PoC SEH 'AoAAudioExtractor 2.0.0.0 ActiveX PoC SEH ' Author: Hadji Samir ,[email protected] ' Tested on: Windows XP SP2 FR / IE6 ' Down: http://www.aoamedia.com/audioextractor.exe ' Date: 2010-08-09 'samir tjrs mahboul-3lik arg1=String2048, "A" nseh=String4, "B"...

Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control stack buffer overflow

Overview The Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control contains a stack buffer overflow that could allow a remote attacker to execute arbitrary code on an affected system Description The Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control,...

Image22 ActiveX 1.1.1 - Remote Buffer Overflow

Image22 ActiveX 1.1.1 - Remote Buffer Overflow ' 988 bytes for shellcode ' bind shell port 4444 sc = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" & unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34" &...

Computer Associates WebScan ActiveX Control Multiple RCE Vulnerabilities

CA PSFormX or WebScan ActiveX controls is prone to multiple remote code execution vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Sun Java Deployment Toolkit Multiple Vulnerabilities (Windows)

This host is installed with Sun Java Deployment Toolkit and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodsunjavajdkmultvulnwinapr10.nasl 7699 2017-11-08 12:10:34Z santu $ Sun Java Deployment Toolkit Multiple Vulnerabilities Windows Authors: Antu Sanadi Copyright:...

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpGetReply Buffer Overflow

'Magneto Software SNTP ActiveX SntpGetReply BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'File Name = SKSntp.ocx 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download: http://www.magnetosoft.com/downloads/sksntpsetup.exe 'Vendor Notified: 02/02/10 -- NO RESPONS...

WebPlayer ActiveX控件拒绝服务漏洞

WebPlayer 2010是一款网络视频播放软件,它具有三个控件CVGPlayer55,CVGPlayer60,CVGPlayer70,当恶意网页中OBJECT标签的style属性：width=130或height=74时,实例化这三个控件将引起CPU占用率上升,IE崩溃. WebPlayer 20100226 设置下列CLSID的KillBit...

Quiksoft EasyMail Objects AddAttachments() ActiveX Control BOF Vulnerability

This host is installed with QuikSoft EasyMail Objects ActiveX Control and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbquiksofteasymailobjactivexbofvulnmar10.nasl 5368 2017-02-20 14:34:16Z cfi $ Quiksoft EasyMail Objects AddAttachments ActiveX Control BOF...