Oracle ORADC ActiveX Control Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22026/info Oracle ORADC ActiveX control is prone to a remote code-execution vulnerability. Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of applications using the affected...

Internet Explorer WebViewFolderIcon setSlice() Overflow

No description provided by source. $Id: ms06057webviewsetslice.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

2X ApplicationServer 10.1 TuxSystem Class ActiveX Control Remote File Overwrite Vulnerability

No description provided by source. 2X ApplicationServer 10.1 TuxSystem Class ActiveX Control TuxScripting.dll ExportSettings Remote File Overwrite Vulnerability tested against: Microsoft Windows Server 2003 r2 sp2 Internet Explorer 8 vendor description: 2X Software is a global leader of desktop a...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution

No description provided by source. !-- | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 Binary Analysis | | | | || / \ || | | | || ||// \/|/ Title : Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Version : UfPBCtrl.DLL...

NCTVideoStudio ActiveX DLLs 1.6 - Remote Heap Overflow PoC

No description provided by source. html ----------------------------------------------------------- br/ Author : Mountassif Mouad Stack br/ ----------------------------------------------------------- br/ NCTVideoStudio ActiveX DLLs Version 1.6 Reamote Heap Overflow Poc br/...

Mitsubishi MX ActiveX Component 3 - (ActUWzd.dll (WzTitle)) - Remote Exploit

No description provided by source. !-- Title: Mitsubishi MX Component v3 ActiveX 365+-Day ActUWzd.dll WzTitle By: DrIDE File: C:\MELSEC\Act\Control\ActUWzd.dll Version 1.0.0.1 Known Affected Systems: CitectScada 7.10r1 ships with this in the Extras folder. Known Affected Systems: CitectFacilities...

Microsoft Windows 95/98/2000/NT4 WinHlp Item Buffer Overflow Vulnerability

... HTML帮助ActiveX控件Hhctrl.ocx由Microsoft HTML Help附带，设计用于与Internet Explorer一起提供帮助功能。 ... HTML帮助ActiveX控件存在漏洞，可导致远程攻击者进行拒绝服务攻击。 ... HTML帮助ActiveX控件存在基于栈和堆的缓冲区溢出，攻击者可以构建包含恶意数据的Web页面，当用户浏览此链接时，可导致拒绝服务攻击，精心构建提交数据可导致以SYSTEM的权限在客户端系统上执行任意命令。...

SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

BroadWin WebAccess Client Multiple Vulnerabilities

No description provided by source. Application: BroadWin WebAccess Client http://broadwin.com/Client.htm Versions: bwocxrun.ocx = 1.0.0.10 aka version 7.0 Platforms: Windows Bugs: A format string B arbitrary memory corruption Exploitation: remote Date: 02 Sep 2011 Author: Luigi Auriemma e-mail:...

Dell Webcam CrazyTalk ActiveX BackImage Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Data Dynamics ActiveReport ActiveX (actrpt2.dll <= 2.5) Inscure Method

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbol----------------------------------------------------------------------------------------------- bData Dynamics ActiveReport ActiveX Control actrpt2.dll = 2.5 SaveLayout Inscure Method/b url:...

IBiz E-Banking Integrator 2.0 - ActiveX Edition Insecure Method Exploit

No description provided by source. -------------------------------------------------------------------- IBiz E-Banking Integrator V2 ActiveX Edition Insecure Method Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it ...

IBM Access Support ActiveX Control Buffer Overflow

No description provided by source. $Id: ibmegathgetxmlvalue.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/22288/info Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions. These issues are triggered when an attacker entices a victim us...

Novell iPrint Client ActiveX Control call-back-url Buffer Overflow

No description provided by source. $Id: novelliprintcallbackurl.rb 10429 2010-09-21 18:46:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

GeoVision LiveX 8200 - ActiveX (LIVEX_~1.OCX) File Corruption PoC

No description provided by source. !-- GeoVision LiveXv8200 ActiveX Control LIVEX1.OCX remote file corruption poc by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ working against IE8b/xpsp3, safe for scripting and for initialize. LiveXv7000 with clsid...

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpSendRequest Crash PoC

No description provided by source. html object classid='clsid:A3010B66-C229-11D5-B7BA-00C0F02DFC67' id='target' //object script language='vbscript' 'Magneto Software SNTP ActiveX SntpSendRequest BOF POC 'Discovered by: s4squatch 'Site: www.securestate.com 'www:...

KSign KSignSWAT <= 2.0.3.3 ActiveX Control Remote BoF Exploit

No description provided by source. !-- /////////////////////////////////////////////////////////////////// // KSignSWAT SWATLogin PoC Code. // // // // URL : www.ksign.com // // Author : KIM Kee-hong [email protected] // // Date : 2007/05/13 // // Notice : Tested on WinXP SP2 KOREAN all patched...

Novell iPrint <= 5.52 ActiveX GetDriverSettings() Remote Exploit (ZDI-10-256)

No description provided by source. !-- Novell iPrint = 5.52 ActiveX GetDriverSettings Remote Exploit ZDI-10-256 Coded By: DrIDE Reference: http://www.zerodayinitiative.com/advisories/ZDI-10-256/ Reference: http://www.vupen.com/english/advisories/2010/3023 Tested On: Windows XP SP3 -- html object...

Yahoo! Toolbar 1.4.1 Helper Class ActiveX Control Remote Buffer Overflow Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26656/info Yahoo! Toolbar ActiveX Control is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the...