Magneto Net Resource ActiveX 4.0.0.5 - 'NetShareEnum' Universal

'Magneto Net Resource ActiveX v4.0.0.5 NetShareEnum Exploit Universal 'Author: dookie 'Original PoC by: s4squatch - http://www.exploit-db.com/exploits/12207 'Vendor: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Control: SKNetResource.ocx 'Function NetShareEnum ByVa...

Cisco Releases Security Advisory

Cisco has released a security advisory to address a vulnerability in Cisco Secure Desktop. Cisco Secure Desktop contains a vulnerable ActiveX control that may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review Cisco security advisory...

Cisco Secure Desktop ActiveX Control Code Execution Vulnerability

...

Remote code execution

Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player WMP 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka "Media Player Remote Code Execution Vulnerability."...

CVE-2010-0268

CVE-2010-0268 describes a remote code execution vulnerability in the Windows Media Player ActiveX control (Windows Media Player 9 Series) on Windows 2000 SP4 and Windows XP SP2/SP3. The issue arises because the ActiveX control incorrectly handles specially crafted media content hosted on a malici...

Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of Cisco Secure Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the Secure Desktop Web...

Windows Media Player Codec检索释放后使用漏洞（MS10-027）

BUGTRAQ ID: 39351 CVE ID: CVE-2010-0268 Windows Media Player是微软操作系统中默认捆绑的媒体播放器。 Windows Media Player中用于检索未知fourCC压缩代码codec的功能中存在安全漏洞。当嵌入式的Windows Media Player控件试图播放包含有未知类型codec的媒体文件时，就会向Microsoft提交请求检索必须的功能。如果在此期间从网页删除了这个控件，清空例程会调用已经释放的指针。 如果Windows Media...

MagnetoSoft NetworkResources ActiveX NetConnectionEnum SEH Overwrite POC

No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Software Net Resource ActiveX NetConnectionEnum SEH Overwrite POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered:...

Microsoft IE winhlp32.exe服务远程代码执行漏洞(MS10-022)

BUGTRAQ ID: 38463 CVE ID: CVE-2010-0483 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 用户可以使用VBScript从IE调用winhlp32.exe服务，如果向该服务传送了恶意的.HLP文件就会导致执行任意命令。 必需一些用户交互才可以触发这个漏洞，在显示MsgBox弹出框时用户需要按下F1。以下是MsgBox函数的句法： MsgBoxprompt,buttons,title,helpfile,context...

MagnetoSoft DNS Active-X DNSLookupHostWithServer Proof Of Concept

'Magneto Software ActiveX Control ICMP Crash POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified: 02/17/10 -- NO RESPONSE 'Published 04/13/10 'www:...

Microsoft Windows Media Player Could Allow Remote Code Execution (979402)

This host is missing a critical security update according to Microsoft Bulletin MS10-027. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Media Player ActiveX Codec Retrieval (CVE-2010-0268)

Microsoft Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in the Windows Media Player's ActiveX control. The vulnerability is due to an error in the Windows...

MagnetoSoft DNS 4.0.0.9 - ActiveX DNSLookupHostWithServer (PoC)

MagnetoSoft DNS 4.0.0.9 - ActiveX DNSLookupHostWithServer PoC 'Magneto Software ActiveX Control ICMP Crash POC 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified:...

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpGetReply Buffer Overflow

MagnetoSoft SNTP 4.0.0.7 - ActiveX SntpGetReply Buffer Overflow 'Magneto Software SNTP ActiveX SntpGetReply BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'File Name = SKSntp.ocx 'www: http://www.magnetosoft.com/products/sksntp/sksntpfeatures.htm 'Download:...

MagnetoSoft NetworkResources ActiveX NetConnectionEnum SEH POC

Exploit for windows platform in category dos / poc ======================================================================== MagnetoSoft NetworkResources ActiveX NetConnectionEnum SEH Overwrite POC ======================================================================== 'Magneto Software Net...

Sun Java Deployment Toolkit Plugin and ActiveX Control Vulnerability

The Sun Java Development Toolkit plugin and ActiveX control contain a vulnerability. This vulnerability is due to insufficient argument validation. By convincing a user to visit a specially crafted HTML document, an attacker may be able to exploit this vulnerability and execute an arbitrary JAR...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetFileClose Overwrite (SEH) (PoC)

'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC 'Discovered by: s4squatch of SecureState R&D Team 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download:...

MagnetoSoft NetworkResources 4.0.0.5 - ActiveX NetSessionDel (PoC)

'Magneto Software Net Resource ActiveX NetSessionDel BOF 'Discovered by: s4squatch 'Site: www.securestate.com 'Date Discovered: 02/11/10 'www: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Download: http://www.magnetosoft.com/downloads/SystemInfoPackSetup.exe 'Vendo...

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry Buffer Overflow

'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website: www.securestate.com 'Date Discovered: 03/11/09 'Exploit Written: 02/02/10 'Vendor Notified: 02/02/10 -- NO RESPONSE 'Vendor Notified: 02/11/10 -- NO RESPONSE 'Vendor Notified: 02/17/10 -- NO RESPONSE...

MagnetoSoft NetworkResources ActiveX NetFileClose SEH Overwrite POC

Exploit for windows platform in category dos / poc =================================================================== MagnetoSoft NetworkResources ActiveX NetFileClose SEH Overwrite POC =================================================================== 'Magneto Software Net Resource ActiveX...