ICONICS Vessel / Gauge / Switch 8.02.140 - ActiveX BOF Exploit (meta)

No description provided by source. $Id: iconicsdlgwrapper.rb 1 2008-09-21 22:43:00Z kf $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft DebugDiag 1.0 'CrashHangExt.dll' ActiveX Control Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31996/info Microsoft DebugDiag 'CrashHangExt.dll' ActiveX control is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error. A successful attack allows a remote attacker to crash the...

Advantech Studio 7.0 - SCADA/HMI Directory Traversal 0day

No description provided by source. Exploit Title: Advantech Studio v7.0 SCADA/HMI Directory Traversal 0-day Google Dork: N/A Date: 2012-12-03 Exploit Author: Nin3 Vendor Homepage: http://advantech.com.tw Version: 7.0 Build Number 0501.1111.0402.0000 Tested on: Windows CVE : N/A ''' Advantech Stud...

SigPlus Pro 3.74 - ActiveX LCDWriteString() Remote BoF JIT Spray - aslr/dep bypass

No description provided by source. html !-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...

Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution

No description provided by source. CVE : CVE-2010-0805 !-- .text:600058F7 and ebp+pv, 0 .text:600058FE lea eax, ebp+pv .text:60005904 push eax ; unsigned int16 .text:60005905 push dword ptr ebx+10h ; struct IOleClientSite .text:60005908 call GetHostURLIOleClientSite ,ushort .text:6000590D mov eax...

Yahoo! Messenger (YVerInfo.dll <= 2007.8.27.1) ActiveX BoF Exploit

No description provided by source. !-- Yahoo! Messenger YVerInfo.dll = 2007.8.27.1 ActiveX Control Buffer Overflows update YM : http://messenger.yahoo.com/securityupdate.php?id=082907 Functions : fvcom or info; RegKey Safe for Script: True RegKey Safe for Init: True - that functions are safely...

IBM ACPRunner 1.2.5 ActiveX Control Dangerous Method Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10561/info It is reported that the IBM acpRunner ActiveX control contains dangerous methods that may result in a remote compromise of a system on which the ActiveX control is installed. These methods may be accessed by a...

Cryptomathic ActiveX Control Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17852/info Cryptomathic ActiveX control is prone to a buffer-overflow vulnerability. The software fails to perform sufficient bounds-checking of user-supplied input before copying it to an insufficiently sized memory...

ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Yahoo! Webcam ActiveX Control 2.0 .0.107 Buffer Overrun Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8634/info A buffer overrun has been discovered in the Yahoo! Webcam ActiveX control. The problem occurs due to insufficient bounds checking when handling user-supplied Webcam parameters. As a result, an attacker may be...

SAP GUI VSFlexGrid.VSFlexGridL sp <= 14 - Buffer Overflow

No description provided by source. Application: SAP GUI VSFlexGrid.VSFlexGridL Part of SAP GUI, SAP BO 2005, SAP BO 2007 Versions Affected: SAP GUI VSFlexGrid Activex Control sp=14 Vendor URL: http://SAP.com Bugs: Buffer Overflovw Exploits: YES Reported: 26.11.2008 Vendor response: 27.11.208 Publ...

Barcodewiz 3.29 - Barcode ActiveX Control Remote Heap Spray Exploit (IE6/IE7)

No description provided by source. !-- Title: Barcodewiz 3.29 ActiveX Heap Spray Exploit Coded By: DrIDE Found By: loneferret Tested: Windows XP SP3 on IE6 + IE7 Date: July, 30 2010 -- html object classid='clsid:CD3B09F1-26FB-41CD-B3F2-E178DFD3BCC6' id='target'/object script language='javascript'...

iseemedia / Roxio / MGI Software LPViewer ActiveX Control Buffer Overflow

No description provided by source. $Id: lpviewerurl.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MS IE 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow

No description provided by source. Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4 Setupctl ActiveX Control Buffer Overflow source: http://www.securityfocus.com/bid/667/info There is a buffer overflow in the setupctl ActiveX control that used to ship with some versions of Microsoft's...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel PoC

No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX NetSessionDel BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www:...

Adobe Flash Player Type Confusion Remote Code Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer def...

Grokster 1.3/2.6,KaZaA Media Desktop 1.3.x/1.6.1/2.0.x ActiveX Control Remote Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/11101/info Altnet is reported prone to a remote buffer overflow vulnerability. This issue presents itself in an ActiveX control installed by the application. Reportedly, a malicious attacker can exploit this issue to...

Oracle Document Capture Insecure READ Method

No description provided by source. Source: http://packetstormsecurity.org/files/view/97872/DSECRG-11-007.txt Digital Security Research Group DSecRG Advisory DSECRG-11-007 Internal DSECRG-00117 Application: Oracle Document Capture Versions Affected: 10.1350.0005 Vendor URL:...

British Telecommunications Consumer Webhelper 2.0.0.7 - Multiple Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/24219/info The British Telecommunications Consumer Webhelper ActiveX control is prone to multiple buffer-overflow vulnerabilities because it fails to bounds-check user-supplied data before copying it into an insufficientl...

Baidu Soba Search Bar 5.4 BaiduBar.DLL ActiveX Control Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25121/info An ActiveX control installed with Baidu Soba search bar is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute hostile code on a victim's computer in the context of the...