Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC

Exploit for unknown platform in category dos / poc =============================================================== Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC =============================================================== Exploit Title: Baidu Security Center FireFoxProxy...

Xunlei XPPlayer <= 5.9.14.1246 ActiveX Remote Exec 0day POC

Exploit for unknown platform in category dos / poc =========================================================== Xunlei XPPlayer = 5.9.14.1246 ActiveX Remote Exec 0day POC =========================================================== Author: superli Version: = 5.9.14.1246 Tested on: xpsp3 ie6 Greetin...

Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC

No description provided by source. Exploit Title: Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://i2d.www.duba.net/i2d/kws3/KWSSetup.exe Version: 3.0 Tested on: xpsp3 ie6 greeting to KingSoft,can you really help users avoiding being...

Adobe GetPlus get_atlcom 1.6.2.48 - ActiveX Remote Execution

PARAM NAME="Service-URL"...

Xunlei XPPlayer 5.9.14.1246 - ActiveX Remote Execution (PoC)

Author: superli Version: = 5.9.14.1246 Tested on: xpsp3 ie6 Greeting to Xunlei Security Center guys,your guys still not yet release patch or new version to fix the vunl which also can attack Xunlei KanKan Playerhttp://dl.xunlei.com/xmp.html. I exposed this vunl two weeks ago,are you really...

Trend Micro Web-Deployment - ActiveX Remote Execution

Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.trendmicro.com Version: 8.0 Tested on: xpsp3 ie6 Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11173.zip...

MS Internet Explorer wshom.ocx ActiveX Control Remote Code Execution

Exploit for unknown platform in category remote exploits ================================================== IE wshom.ocx ActiveX Control Remote Code Execution ================================================== IE ActiveX remote bof remote code excution version: all versions tested on : windows 7 ...

Microsoft Internet Explorer - 'wshom.ocx' ActiveX Control Remote Code Execution

IE ActiveX remote bof remote code excution version: all versions Author: germayax & D3V!L FUCKER special thanx: for my best friend his0k4. Geetz 2 :Sarbot511 ,thrid-devil. tested on : windows 7 , windows vista ,windows xp sp2 arg1="c:\WINDOWS\system32\calc.exe" target.Exec arg1...

Microsoft Internet Explorer - wshom.ocx ActiveX Control Remote Code Execution

Microsoft Internet Explorer - wshom.ocx ActiveX Control Remote Code Execution IE ActiveX remote bof remote code excution version: all versions Author: germayax & D3V!L FUCKER special thanx: for my best friend his0k4. Geetz 2 :Sarbot511 ,thrid-devil. tested on : windows 7 , windows vista ,windows ...

MS Internet Explorer wshom.ocx ActiveX remote code Execution 2

Exploit for unknown platform in category remote exploits ================================================================================ MS Internet Explorer wshom.ocx ActiveX remote code Execution 2 insecure method ================================================================================...

Adobe Flash Player 6多个远程代码执行漏洞

Bugraq ID: 37753 Adobe Flash Player是一款Flash文件处理程序。 Microsoft Windows XP提供的Macromedia Flash ActiveX控件存在内存破坏问题，允许远程攻击者在系统上执行任意代码。 Microsoft Windows XP提供Macromedia Flash ActiveX控件的早期版本，根据补丁级别不同，由flash.ocx或flash6.ocx提供。部分与这个ActiveX控件的交互存在堆内存破坏问题，可导致任意代码执行。这个漏洞不影响Flash 9或之后的安装版本。...

Movie Player Pro SDK ActiveX控件DrawText()方式栈溢出漏洞

Movie Player Pro SDK ActiveX是用于播放多媒体文件的ActiveX控件。 MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX控件（MoviePlayer.ocx）没有正确地过滤用户提交给DrawText方式的strFontName参数，用户受骗访问了恶意网页并传送了超长的字体名称参数就可以触发栈溢出，导致执行任意指令。 Viscom Softwares Movie Player Pro SDK ActiveX 6.8.0.0 厂商补丁： Viscom Softwares ----------------...

Microsoft Internet Explorer HTML object memory corruption vulnerability

Overview An invalid pointer reference within Microsoft Internet Explorer may lead to execution of arbitrary code. Description Microsoft Internet Explorer contains a memory corruption vulnerability, which can result in an invalid pointer being accessed after an object is incorrectly initialized or...

CVE-2009-3958

CVE-2009-3958 involves multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control (gp.ocx) used by Adobe Download Manager. The affected products are Adobe Reader/Acrobat 9.x (before 9.3) and 8.x (before 8.2) on Windows and Mac OS X. The vulnerability could allow ...

NOS Microsystems Adobe getPlus Helper ActiveX control stack buffer overflows

Overview The NOS Microsystems Adobe getPlus Helper ActiveX control contains stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description NOS Microsystems getPlus is download management software that is used to install Ado...

Adobe Acrobat < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)

The version of Adobe Acrobat installed on the remote host is earlier than 9.3 / 8.2. Such versions are reportedly affected by multiple vulnerabilities : - A use-after-free vulnerability in 'Multimedia.api' can lead to code execution. CVE-2009-4324 - An array boundary issue in 'U3D' support can le...

Adobe Reader < 9.3 / 8.2 Multiple Vulnerabilities (APSB10-02)

The version of Adobe Reader installed on the remote host is earlier than 9.3 / 8.2. Such versions are reportedly affected by multiple vulnerabilities : - A use-after-free vulnerability in 'Multimedia.api' can lead to code execution. CVE-2009-4324 - An array boundary issue in 'U3D' support can lea...

CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

Session fixation

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

CVE-2010-0278

The CVE-2010-0278 entry covers a vulnerability in an ActiveX control (msgsc.14.0.8089.726.dll) used by Microsoft Windows Live Messenger 2009 (build 14.0.8089.726) on Windows Vista/7. The flaw is triggered by calling the ViewProfile method with a crafted argument during an MSN Messenger session, c...