Google Chrome Browser 0.2.149.27 Automatic File Download Exploit

Exploit for unknown platform in category remote exploits ================================================================ Google Chrome Browser 0.2.149.27 Automatic File Download Exploit ================================================================ Author: nerex E-mail: nerexatlivedotcom...

Google Chrome 0.2.149.27 - Automatic File Download

Author: nerex E-mail: nerexatlivedotcom Google's new Web browser Chrome allows files e.g., executables to be automatically downloaded to the user's computer without any user prompt. This proof-of-concept was created for educational purposes only. Use the code it at your own risk. The author will...

Design/Logic Flaw

The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destinati...

CVE-2008-3879

The CVE-2008-3879 issue affects Ultra Office Control (ActiveX) in OfficeCtrl.ocx 2.0.2008.801 and earlier. The vulnerable components are the Open method (URL argument) and Save method (SaveAsDocument argument). A remote attacker can trick a client into downloading arbitrary files by supplying a U...

linux/x86 connect back, download a file and execute 149 bytes

linux/x86 connect back, download a file and execute 149 bytes. Shellcode exploit for linx86 platform / ;file download shellcode 149 bytes ; ;connect back, download a file and execute. ;modify the name of the file and the ip address first. ; ;militan ;Advanced Defense LabADL ; global start start:...

linux/x86 connect back download a file and execute 149 bytes

No description provided by source. / ;file download shellcode 149 bytes ; ;connect back, download a file and execute. ;modify the name of the file and the ip address first. ; ;militan ;Advanced Defense LabADL ; global start start: xor ecx,ecx mul ecx xor ebx,ebx cdq ;socket push eax push byte 0x1...

CVE-2008-3270

CVE-2008-3270 affects yum-rhn-plugin on Red Hat Enterprise Linux 5. The root cause is that the plugin fails to verify the SSL certificate when contacting the Red Hat Network, enabling a man-in-the-middle to potentially cause a denial of service (loss of updates) or force installation of unrequest...

CVE-2008-3270

yum-rhn-plugin in Red Hat Enterprise Linux RHEL 5 does not verify the SSL certificate for a file download from a Red Hat Network RHN server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service loss of updates or force the download and installation of official...

Microsoft Access ActiveX file download

SnapShot Viewer ActiveX allows file download to any location...

moziloCMS 1.10.1 (download.php) Arbitrary Download File Exploit

No description provided by source. !/usr/bin/perl moziloCMS 1.10.1 Perl exploit discovered & written by Ams ax330d doggy gmail dot com DESCRIPTION: Vulnerability hides in "download.php", which we can use to download any file we want to. Here, for example, "admin/conf/logindata.conf". Btw, not ver...

moziloCMS 1.10.1 - 'download.php' Arbitrary Download File

!/usr/bin/perl moziloCMS 1.10.1 Perl exploit discovered & written by Ams ax330d doggy gmail dot com DESCRIPTION: Vulnerability hides in "download.php", which we can use to download any file we want to. Here, for example, "admin/conf/logindata.conf". Btw, not very smart solution to keep it open no...

Velocity web-server 1.0 Directory Traversal File Download Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-028 Application: Velocity web-server a part of Velocity Security Management System Versions Affected: Old version 1.0 Vendor URL: http://hirschelectronics.com Bugs: Directory traversal File Download...

Velocity web-server 1.0 Directory Traversal File Download Vulnerability

Exploit for unknown platform in category remote exploits ======================================================================= Velocity web-server 1.0 Directory Traversal File Download Vulnerability ======================================================================= Digital Security Researc...

Microsoft Access - 'Snapview.ocx 10.0.5529.0' ActiveX Remote File Download

/ Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Access SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery https://www.securityfocus.com/bid/8536/info Remote: Yes greetz to str0ke / include include define...

Microsoft Access - Snapview.ocx 10.0.5529.0 ActiveX Remote File Download

Microsoft Access - Snapview.ocx 10.0.5529.0 ActiveX Remote File Download / Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Access SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery...

MS Internet Explorer COM Objects File Download Exploit (MS05-038)

No description provided by source. /+++++++++++++++++++++++++++++++++++++++++++++++ Ms05 038 exploit POC Write By ZwelL 2005 8 11 http://www.donews.net/zwell [email protected] Some code belongs to Lioncnhonker, regards to him. This code tested on Windows 2003...

Sina DLoader类ActiveX控件'DonwloadAndInstall'方法任意文件下载漏洞

BUGTRAQ ID: 30223 CNCAN ID：CNCAN-2008071507 Sina UC是一款新浪网开发的基于P2P的即时通讯和娱乐平台。 Sina DLoader类ActiveX控件'DonwloadAndInstall'方法存在输入验证问题，远程攻击者可以利用漏洞下载任意文件到目标系统，并以登录进程权限执行。 问题是'DonwloadAndInstall'方法对参数缺少充分检查，可直接提交远程服务器的任意文件作为参数，程序不经过验证即可下载，导致以登录进程权限执行。 Sina Inc. DLoader 目前没有解决方案提供： http://www.51uc.com/...

Sina DLoader Class - ActiveX Control DonwloadAndInstall Method Arbitrary File Download

Sina DLoader Class - ActiveX Control DonwloadAndInstall Method Arbitrary File Download source: https://www.securityfocus.com/bid/30223/info Sina DLoader is prone to a vulnerability that can cause malicious files to be downloaded and saved to arbitrary locations on an affected computer. Attackers...

Sina DLoader Class - ActiveX Control 'DonwloadAndInstall' Method Arbitrary File Download

source: https://www.securityfocus.com/bid/30223/info Sina DLoader is prone to a vulnerability that can cause malicious files to be downloaded and saved to arbitrary locations on an affected computer. Attackers may exploit this issue to overwrite sensitive files with malicious data that will...

Microsoft Access Snapshot Viewer file download vulnerability

Added: 07/11/2008 CVE: CVE-2008-2463 BID: 30144 OSVDB: 46749 Background The Snapshot Viewer for Microsoft Access is used to display report snapshots without needing to fully invoke Access. It enables an ActiveX control in snapview.ocx. Problem The Snapshot Viewer ActiveX control allows remote fil...