10868 matches found
Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF Exploit
No description provided by source. ?php // 0x48k-ymj by ... // based on /5043 // Bug discovered by Krystian Kloskowski h07 [email protected] function unescape$s $res=strtoupperbin2hex$s; $g = roundstrlen$res/4; if $g != strlen$res/4$res.="00"; $out = "";...
Yahoo! Music Jukebox 2.2 - AddImage() ActiveX Remote Buffer Overflow (1)
Yahoo! Music Jukebox 2.2 - AddImage ActiveX Remote Buffer Overflow 1 function unescape$s $res=strtoupperbin2hex$s; $g = roundstrlen$res/4; if $g != strlen$res/4$res.="00"; $out = ""; for $i=0; $i function gsc var hsta = 0x0c0c0c0c; var plc = unescape"%u4343%u4343"+...
Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap() BOF Exploit
Exploit for unknown platform in category remote exploits ====================================================================== Yahoo! JukeBox MediaGrid ActiveX mediagrid.dll AddBitmap BOF Exploit ====================================================================== Yahoo! JukeBox MediaGrid...
Yahoo! Music Jukebox 2.2 - AddImage() ActiveX Remote Buffer Overflow (2)
Yahoo! Music Jukebox 2.2 - AddImage ActiveX Remote Buffer Overflow 2 // HeapSpray - execute calculator calc.exe shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" + "%u3058%u3142%u4250%u6b41%u4142%u4253%u4232%u3241" +...
Yahoo! Toolbar URL Shortcut ActiveX Control Buffer Overflow (CVE-2007-6535)
Yahoo! Toolbar is a pop-up blocker for Firefox and Internet Explorer that allows instant access to several Yahoo! features. A buffer overflow vulnerability was reported in Yahoo! Toolbar. This vulnerability is due to boundary errors in the Yahoo! Toolbar YShortcut ActiveX Control. To trigger this...
Yahoo! Music Jukebox 2.2 AddImage() ActiveX Remote BOF PoC Exploit
Exploit for unknown platform in category dos / poc ================================================================== Yahoo! Music Jukebox 2.2 AddImage ActiveX Remote BOF PoC Exploit ================================================================== Product homepage: http://music.yahoo.com/jukebo...
Yahoo! Music Jukebox 2.2 - AddImage() ActiveX Remote Buffer Overflow (PoC)
Yahoo! Music Jukebox 2.2 - AddImage ActiveX Remote Buffer Overflow PoC Product homepage: http://music.yahoo.com/jukebox/ Tested on:.. - Yahoo! Music Jukebox 2.2.2.056 - MS IE 6 Details:.. ---------------------------------------------------------------- Exception C0000005 ACCESSVIOLATION reading...
Yahoo! Music Jukebox 2.2 - 'AddImage()' ActiveX Remote Buffer Overflow (PoC)
Product homepage: http://music.yahoo.com/jukebox/ Tested on:.. - Yahoo! Music Jukebox 2.2.2.056 - MS IE 6 Details:.. ---------------------------------------------------------------- Exception C0000005 ACCESSVIOLATION reading 41414141 ---------------------------------------------------------------...
Information disclosure
The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...
CVE-2008-0551
The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...
CVE-2008-0551
CVE-2008-0551 documents a vulnerability in the NamoInstaller.NamoInstall.1 ActiveX control (NamoInstaller.dll, version 3.0.0.1 and earlier) used with Sejoong Namo ActiveSquare 6. The flaw allows remote attackers to trigger arbitrary code execution by passing a URL argument to the Install method. ...
CVE-2008-0551
The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...
chilkatftp-insecure.txt
======================================================================= Chilkat FTP ActiveX 2.0 ChilkatCert.dll Insecure Method Web site : www.chilkatsoft.com=======================================================================Author: darkl0rd E-mail: [email protected] Tested on Windows XP...
Persits Software XUpload AddFile()方式远程栈溢出漏洞
BUGTRAQ ID: 27456 XUpload是功能强大的客户端上传ActiveX控件，允许用户同时上传多个文件。 XUpload的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 XUpload的Persits.XUpload.2 ActiveX控件（XUpload.ocx）没有正确地处理传送给AddFile方式的输入参数，如果用户受骗访问了恶意网页并向该方式传送了超长字符串参数的话，就可能触发栈溢出，导致执行任意指令。 Persits XUpload 3.0.0.4 Persits XUpload 2.1.0.1 厂商补丁： Persits...
Chilkat FTP ActiveX 2.0 (ChilkatCert.dll) Insecure Method Exploit
Exploit for unknown platform in category remote exploits ================================================================= Chilkat FTP ActiveX 2.0 ChilkatCert.dll Insecure Method Exploit =================================================================...
SwiftView Viewer Plugin < 8.3.5 Buffer Overflow
A SwiftView Viewer ActiveX control and/or browser plug-in is installed on the remote Windows host. SwiftView Viewer is an application for viewing and printing print streams. According to its version, the SwiftView ActiveX control / browser plug-in currently installed is affected by a stack-based...
Chilkat FTP ActiveX 2.0 - 'ChilkatCert.dll' Insecure Method
======================================================================= Chilkat FTP ActiveX 2.0 ChilkatCert.dll Insecure Method Web site : www.chilkatsoft.com=======================================================================Author: darkl0rd E-mail: [email protected] Tested on Windows XP...
Skype Web内容区远程代码执行漏洞
BUGTRAQ ID: 27338 CVECAN ID: CVE-2007-5989 Skype是一款流行的P2P VoIP软件，可提供高质量的语音通讯服务。 Skype的ActiveX控件运行环境设置上存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行任意指令。 Skype使用了Internet Explorer Web控件来渲染HTML内容并提供“add video to mood”和“add video to chat”功能。这些功能都是通过JS/ActiveX接口实现的，允许在IE的Local...
Chilkat FTP ActiveX 2.0 (ChilkatCert.dll) Insecure Method Exploit
No description provided by source. body bgcolor="000000" div align="center" precodespan style="font: 10pt verdana;"font color="00FF00"======================================================================= /font/divcenter h1 id="product"font color="00FF00" size="2"Chilkat FTP ActiveX 2.0...
Chilkat FTP ActiveX 2.0 - ChilkatCert.dll Insecure Method
Chilkat FTP ActiveX 2.0 - ChilkatCert.dll Insecure Method ======================================================================= Chilkat FTP ActiveX 2.0 ChilkatCert.dll Insecure Method Web site : www.chilkatsoft.com=======================================================================Author:...