Microsoft Internet Explorer - wshom.ocx (Run) ActiveX Code Execution (Add Admin)

Microsoft Internet Explorer - wshom.ocx Run ActiveX Code Execution Add Admin Exploit Title: IE wshom.ocx Run ActiveX Remote Code Execution add admin user Date: 22/01/2010 Author: Stack Version: ALL Tested on: winsp2 arg1="cmd /c net user username password /add && net localgroup Administrateurs...

Microsoft IE表格布局Col标签缓存更新远程代码执行漏洞（MS10-002）

BUGTRAQ ID: 37891 CVE ID: CVE-2010-0244 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 在HTML表格容器中使用Col元素的时候，如果在使用表格期间删除了这个元素，则在任意元素失效后会使用表格单元格中的缓存。 攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。 Microsoft Internet Explorer 8.0 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsof...

MS Internet Explorer vbDevKit.dll ActiveX Control Multti Remote Code

Exploit for unknown platform in category remote exploits ============================================================================== MS Internet Explorer vbDevKit.dll ActiveX Control Multti Remote Code Execution ==============================================================================...

Windows Live Messenger 2009 Active-X Heap Overflow

Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC downloads :http://download.live.com/ Date : 2010/01/21 tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live...

Windows Live Messenger 2009 ActiveX Heap Overflow PoC

No description provided by source. Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 html object classid='clsid:C2828995-4A83-4100-A212-3024BA117356' id='target'...

CVE-2010-0379

Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in Microsoft Windows XP SP2 and SP3, might allow remote attackers to execute arbitrary code via unspecified vectors that are not related to the use-after-free "Movie Unloading...

CVE-2010-0379

Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in Microsoft Windows XP SP2 and SP3, might allow remote attackers to execute arbitrary code via unspecified vectors that are not related to the use-after-free "Movie Unloading...

CVE-2010-0379

Mode C: The CVE-2010-0378/CVE-2010-0379 family concerns Adobe Flash Player 6.0.79 in the Macromedia Flash ActiveX control for Windows XP SP2/SP3. The use-after-free vulnerability in CVE-2010-0378 allows remote code execution when unloading a Flash object being accessed by a script, causing memory...

Microsoft Knew of IE Zero-Day Flaw Since September

Microsoft today admitted it knew of the Internet Explorer flaw used in the attacks against Google and Adobe since September last year. The flaw was in the Microsoft Security Response Center’s MSRC queue to be fixed in the the next batch of patches due in February but the targeted zero-day attacks...

Windows Live Messenger 2009 ActiveX Heap Overflow PoC

Exploit for unknown platform in category dos / poc ===================================================== Windows Live Messenger 2009 ActiveX Heap Overflow PoC ===================================================== Aouther : SarBoT511 Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflo...

AXIS Communications Camera Control image_pan_tilt Buffer Overflow (CVE-2008-5260)

AXIS Communications provides professional network video solutions for surveillance and remote monitoring. The surveillance products by AXIS include network cameras, video servers, video decoders, video management software, and a full range of accessories. AXIS Camera Control is one of such remote...

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow (PoC)

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow PoC Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live...

Microsoft Windows Live Messenger 2009 - ActiveX Heap Overflow (PoC)

Aouther : SarBoT511 [email protected] Exploits title :Windows Live Messenger 2009 ActiveX Heap Overflow PoC tested on :windows 7 & Vista & Xp sp3 Windows Live Messenger SkyDrive 2009 targetFile = "C:\Program Files\Windows Live SkyDrive\Microsoft.Live.Folders.RichUpload.3.dll" prototype = "Property...

Xunlei XPPlayer / Xunlei KanKan Player ActiveX integer overflow

No description provided...

QvodPlayer ColorFilter Codec ActiveX Remote Exec

QvodPlayer ColorFilter Codec ActiveX Remote Exec Download : http://www.qvod.com Vulnerability: object id=TestObj classid="CLSID:432F118C-DB79-4561-9799-CC95EA78208B" style="width:100;height:350"/object Tested on XpSP2 IE6/7 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts:...

Baidu Security Center memory corruption

FireFoxProxy ActiveX memory corruption...

AOL 9.5 ActiveX 0day Exploit (heap spray)

Exploit for unknown platform in category remote exploits ========================================= AOL 9.5 ActiveX 0day Exploit heap spray ========================================= AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Tested on...

AOL 9.5 - ActiveX Heap Spray

AOL 9.5 - ActiveX Heap Spray AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Discovered by: Hellcode Research http://www.hellcode.net + Reference: http://www.exploit-db.com/exploits/11190 + Tested on Windows Xp SP3 ,IE7 // win32exec - calc...

Microsoft Windows Defender Active-X Heap Overflow Version 2

Aouther : SarBoT511 Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC downloads :www.microsoft.com Date : 2010/01/19 tested on :windows 7 Microsoft Windows Defender targetFile = "C:\Program Files\Windows Defender\MsMpCom.dll" prototype = "Sub WriteValue ByVal bstrKeyName As...

Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC

Date: 2010.01.17 Author: superli Software Link: http://an.baidu.com/ Version: 2.0 Tested on: xpsp3 ie6 Greeting to all the guys of Baidu Security Center,please dont use Kingsoft sht to keep your user safe,you can use 360safe instead.I guess I will join your team and play games together one day...