GeoVision LiveX_v8200 ActiveX (LIVEX_~1.OCX) File Corruption PoC

No description provided by source. !-- GeoVision LiveXv8200 ActiveX Control LIVEX1.OCX remote file corruption poc by Nine:Situations:Group::SnoopyAssault site: http://retrogod.altervista.org/ working against IE8b/xpsp3, safe for scripting and for initialize. LiveXv7000 with clsid...

GeoVision LiveX 8200 - ActiveX 'LIVEX_~1.OCX' File Corruption

function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; param name="SvrType" va...

GeoVision LiveX 8200 - ActiveX LIVEX_~1.OCX File Corruption

GeoVision LiveX 8200 - ActiveX LIVEX1.OCX File Corruption function sleepn var now = new Date; var exitTime = now.getTime + n1000; while true now = new Date; if now.getTime exitTime return; par...

Update Protection against Akamai Download Manager Arbitrary Program Execution

In its Update Rollup for ActiveX Kill Bits from February 2009 960715, Microsoft has released a security update to set a kill bit for an ActiveX control developed by Akamai Technologies. Akamai Technologies has released a security update that addresses a vulnerability in the affected...

Nokia Phoenix Service Software ActiveX控件多个缓冲区溢出漏洞

BUGTRAQ ID: 33726 Nokia Phoenix Service Software是用于刷机诺基亚手机的软件。 Nokia Phoenix Service...

Synactis All-In-The-Box ActiveX Remote Code Execution Vulnerability

This host is installed with All-In-The-Box ActiveX and is prone to Remote Code Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsynactisallintheboxactivexcodeexecvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Synactis All-In-The-Box ActiveX Remote Code Execution Vulnerability Authors: Sujit...

CVE-2009-0305

Multiple stack-based buffer overflows in the Research in Motion RIM AxLoader ActiveX control in AxLoader.ocx and AxLoader.dll in BlackBerry Application Web Loader 1.0 allow remote attackers to execute arbitrary code via unspecified use of the 1 load or 2 loadJad method...

CVE-2009-0465

The SaveDoc method in the AllInTheBox.AllBox ActiveX control in ALLINTHEBOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\0' character, which bypasses the intended .box filename extension, as demonstrated by ...

Code injection

The SaveDoc method in the AllInTheBox.AllBox ActiveX control in ALLINTHEBOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\0' character, which bypasses the intended .box filename extension, as demonstrated by ...

AutoDesk LiveUpdate ActiveX Control ApplyPatch Method Execution

The version of the LiveUpdate ActiveX control, a component included with AutoCAD-based products and installed on the remote Windows host, reportedly allows execution of arbitrary programs via the second argument to the control's 'ApplyPatch' method. If an attacker can trick a user on the affected...

Update Protection against AXIS Communications Camera Control image_pan_tilt Buffer Overflow

A buffer overflow vulnerability was reported in the ActiveX Camera Control by AXIS Communications. A remote image/video monitoring solution, AXIS Camera Control is an ActiveX control with multiple functions that can be used over HTTP. The vulnerability is due to a boundary error that can be...

Detection of Dangerous ActiveX Control

This script will list all the vulnerable ActiveX controls installed on the remote windows machine with references and cause. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the Web On Windows WOW ActiveX control in WOW ActiveX 2 allow remote attackers to 1 create and overwrite arbitrary files via the WriteIniFileString method, 2 execute arbitrary programs via the ShellExecute method, 3 read from the registry via unspecifie...

CVE-2009-0389

Multiple insecure method vulnerabilities in the Web On Windows WOW ActiveX control in WOW ActiveX 2 allow remote attackers to 1 create and overwrite arbitrary files via the WriteIniFileString method, 2 execute arbitrary programs via the ShellExecute method, 3 read from the registry via unspecifie...

CVE-2009-0389

WoW ActiveX 2.x is vulnerable to multiple remote code execution (RCE) vulnerabilities in the Web On Windows WOW ActiveX control. The CVE-2009-0389 description cites insecure methods (WriteIniFileString, ShellExecute) that can lead to arbitrary file writes or execution, and possible registry acces...

CVE-2009-0389

Multiple insecure method vulnerabilities in the Web On Windows WOW ActiveX control in WOW ActiveX 2 allow remote attackers to 1 create and overwrite arbitrary files via the WriteIniFileString method, 2 execute arbitrary programs via the ShellExecute method, 3 read from the registry via unspecifie...

Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting Exploits: YES Reported:...

MW6 Barcode ActiveX控件远程缓冲区溢出漏洞

MW6 Barcode ActiveX是用于创建一维条码的工具。 MW6 Barcode ActiveX的实现上存在缓冲溢出漏洞，远程攻击者可能利用此漏洞控制用户客户端系统。 Barcode.MW6Barcode.1 ActiveX控件Barcode.dll在处理超长的Supplement参数数据时存在堆溢出问题，远程恶意网站可以通过包含超长参数的网页ActiveX调用在用户客户端系统上执行任意指令。 MW6 Technologies Barcode ActiveX 3.x 厂商补丁： MW6 Technologies ----------------...

WOW - Web On Windows ActiveX Control 2 Remote Code Execution

No description provided by source. Written By Michael Brooks Special thanks to str0ke! software:WOW - Web On Windows ActiveX Control 2 - Remote Code Execution exploit type: Remote File Upload and Remote Code Execution Download:...

Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln

Exploit for unknown platform in category remote exploits ================================================================ Synactis AllINTHEBOX ActiveX v3 Null byte File Overwrite Vuln ================================================================ Digital Security Research Group DSecRG Advisory...