EnjoySAP SAP GUI ActiveX Control Arbitrary File Download

This module allows remote attackers to place arbitrary files on a users file system by abusing the "CompDownload" method in the SAP KWEdit ActiveX Control kwedit.dll 6400.1.1.41. This module requires Metasploit: https://metasploit.com/download Current source:...

SAP GUI (SAPGUI) — DLL hijacking

Application: SAP GUI Versions Affected: 6.4 — 7.2 Vendor URL: Bugs: DLL hijacking Exploits: YES Reported: 24.08.2010 Vendor response: 26.08.2010 Date of Public Advisory: 09.03.2011 CVE-number: Author: Alexey Sintsov, Alexandr Polyakov Description SAP Front End applications SAPGui.exe are vulnerab...

SAP GUI ActiveX unauthorized access

EAI WebViewer2D, VSFlexGrid, SAPBExCommonResources components insecure method...

SAP GUI SAPBExCommonResources ActiveX Command Execution

The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. The SAP GUI family is available for Windows, Java, and HTML/Internet Transaction Server ITS environment. A buffer overflow vulnerability has been reported in SAP GUI SAPBExCommonResources Active...

SAP GUI version 7.00 BExGlobal Active-X unsecure method

No description provided by source. Security vulnerability found in SAP GUI 7.10 and BI 7.0 that allows operating system functions to be called remotely. Application: SAP GUI Versions Affected: SAP GUI SAP GUI 7.1 Vendor URL: http://SAP.com Bugs: Insecure method. Code Execution. Exploits: YES...

SAP GUI version 7.00 BExGlobal Active-X unsecure method

Exploit for windows platform in category remote exploits ======================================================= SAP GUI version 7.00 BExGlobal Active-X unsecure method ======================================================= Security vulnerability found in SAP GUI 7.10 and BI 7.0 that allows...

SAP GUI 7.00 - BExGlobal Active-X unsecure method

Security vulnerability found in SAP GUI 7.10 and BI 7.0 that allows operating system functions to be called remotely. Application: SAP GUI Versions Affected: SAP GUI SAP GUI 7.1 Vendor URL: http://SAP.com Bugs: Insecure method. Code Execution. Exploits: YES Reported: 16.10.2009 Vendor response:...

SAP GUI 7.00 - BExGlobal Active-X unsecure method

SAP GUI 7.00 - BExGlobal Active-X unsecure method Security vulnerability found in SAP GUI 7.10 and BI 7.0 that allows operating system functions to be called remotely. Application: SAP GUI Versions Affected: SAP GUI SAP GUI 7.1 Vendor URL: http://SAP.com Bugs: Insecure method. Code Execution...

[DSECRG-09-064] SAP GUI - Insecure method, code execution

Digital Security Research Group DSecRG Advisory DSECRG-09-064 Application: SAP GUI Versions Affected: SAP GUI SAP GUI 7.1 Vendor URL: http://SAP.com Bugs: Insecure method. Code Execution. Exploits: YES Reported: 16.10.2009 Vendor response: 27.10.2009 Date of Public Advisory: 23.03.2010 Author:...

SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray Exploit

No description provided by source. SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit Author: Alexey Sintsov Homepage: http://www.dsec.ru/ http://www.exploit-db.com/sploits/11661.zip...

SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray

SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit Author: Alexey Sintsov Homepage: http://www.dsec.ru/ https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/11661.zip...

SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray Exploit

Exploit for unknown platform in category remote exploits =========================================================== SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray Exploit =========================================================== SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit...

SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray

SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit Author: Alexey Sintsov Homepage: http://www.dsec.ru/ https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11661.zip...

SAP GUI TabOne ActiveX Control Caption List Buffer Overflow (CVE-2008-4827)

The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. The SAP GUI family is available for Windows, Java, and HTML/Internet Transaction Server ITS environment. There exists a buffer overflow vulnerability in the SAP GUI. Remote attackers can exploit...

SAP GUI for Windows - sapirrfc.dll ActiveX Overflow

SAP GUI for Windows - sapirrfc.dll ActiveX Overflow SAP GUI for Windows sapirrfc.dll Accecpt Activex Overflow www.Abysssec.com Public Exploit / Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported:...

SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit

No description provided by source. html title SAP GUI for Windows sapirrfc.dll Accecpt Activex Overflow /title center h1 www.Abysssec.com Public Exploit h1 /center object classid='clsid:77F12F8A-F117-11D0-8CF1-00A0C91D9D87' id='target' / script / Application: SAP GUI for Windows, EnjoySAP Version...

SAP GUI for Windows - 'sapirrfc.dll' ActiveX Overflow

SAP GUI for Windows sapirrfc.dll Accecpt Activex Overflow www.Abysssec.com Public Exploit / Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor response: 17.11.2008 Date of Public...

SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit ========================================================= Title: SAP GUI for Windows sapirrfc.dll Activex Overflow Exploit...

SAP GUI 7.1 — Insecure Method, Code execution

Application: SAP GUI Versions Affected: SAP GUI SAP GUI 7.1 Vendor URL: Bugs: Insecure method, Code Execution Exploits: YES Reported: 16.10.2009 Vendor response: 27.10.2009 Date of Public Advisory: 23.03.2010 Author: Sintsov Alexey Description Insecure method was founded in SAPBExCommonResources...

[DSECRG-09-017] SAP GUI vsflexGrid ActiveX - Buffer Overflow vulnerability

Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.208 Public Advisory: 06.10.2009 Originaly...