VMware - COM API ActiveX Remote Buffer Overflow (PoC)

----------------------------------------------------------------------------- VMWare COM API Buffer Overflow url: http://www.vmware.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.net This was written for educational purpose. Use it at your own risk. Author will be not...

VMware COM API ActiveX Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================= VMware COM API ActiveX Remote Buffer Overflow PoC ================================================= ----------------------------------------------------------------------------- VMWare COM API...

Friendly Technologies 'fwRemoteCfg.dll' ActiveX控件信息泄漏漏洞

BUGTRAQ ID: 30939 CNCAN ID：CNCAN-2008090102 Friendly Technologies是一款提供类似L2TP和PPPoE客户端的解决方案。 Friendly Technologies fwRemoteCfg.dll存在输入验证错误，远程攻击者可以利用漏洞获得敏感信息。 fwRemoteCfg.dll用于提供拨号相关功能，由于对RegistryValue, readreg, readme方法缺少充分过滤，可导致攻击者构建恶意WEB页，诱使用户访问可获得敏感信息。 Friendly Technologies fwRemoteCfg.dll...

VMware - COM API ActiveX Remote Buffer Overflow (PoC)

VMware - COM API ActiveX Remote Buffer Overflow PoC ----------------------------------------------------------------------------- VMWare COM API Buffer Overflow url: http://www.vmware.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.net This was written for educational...

Friendly Technologies (fwRemoteCfg.dll) ActiveX Command Exec Exploit

No description provided by source. !-- In addition to the overflow found in the "Friendly Technologies" dialers ActiveX, Here is a "remote command execution" exploit. Its so sad people dont actually Think... Greetz to Binaryvision ====================== - http://www.binaryvision.org.il/ --...

LogMeIn Remote Access Utility ActiveX Memory Corruption DoS

No description provided by source. html body pre LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com eax=024521b8 ebx=00000002...

Friendly Technologies 'fwRemoteCfg.dll' ActiveX控件远程缓冲区溢出漏洞

BUGTRAQ ID:30891 CNCAN ID：CNCAN-2008082904 Friendly Technologies是一款提供类似L2TP和PPPoE客户端的解决方案。 Friendly Technologies fwRemoteCfg.dll存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 fwRemoteCfg.dll用于提供拨号相关功能，由于对其他参数缺少充分边界检查，构建恶意WEB页，诱使用户访问，可导致触发缓冲区溢出以应用程序权限执行任意指令。 Friendly Technologies fwRemoteCfg.dll 目前没有解决方案提供：...

Friendly Technologies (fwRemoteCfg.dll) ActiveX Remote BOF Exploit

No description provided by source. !-- "Friendly Technologies" provide software like L2TP and PPPoE clients to ISPs, who give the software to their customers on CD so they have less trouble setting up thire connections. They also provide remote configuration solutions .. not the best idea if you...

Friendly Technologies 'fwRemoteCfg.dll' ActiveX控件任意命令执行漏洞

BUGTRAQ ID:30889 CNCAN ID：CNCAN-2008082903 Friendly Technologies是一款提供类似L2TP和PPPoE客户端的解决方案。 Friendly Technologies fwRemoteCfg.dll不正确调用方法，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 fwRemoteCfg.dll用于提供拨号相关功能，由于对"RunApp"方法缺少充分检查，构建恶意WEB页，诱使用户访问，可导致以应用程序权限执行任意命令。 Friendly Technologies fwRemoteCfg.dll 目前没有解决方案提供：...

CVE-2008-3480

The CVE-2008-3480 issue affects the Anzio Web Print Object (WePO) ActiveX control, with stack/heap-based overflow when processing a long mainurl parameter in WePO 3.2.19 and 3.2.24 (and related components), enabling remote arbitrary code execution. CoreLabs/Core advisory CORE-2008-0624 documents ...

LogMeIn Remote Access Utility ActiveX Memory Corruption DoS

Exploit for unknown platform in category dos / poc =========================================================== LogMeIn Remote Access Utility ActiveX Memory Corruption DoS =========================================================== LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC D...

LogMeIn Remote Access Utility - ActiveX Memory Corruption (Denial of Service)

LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com eax=024521b8 ebx=00000002 ecx=020e9f54 edx=00000011 esi=00000000 edi=00000000...

logmein-activex.txt

LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com eax=024521b8 ebx=00000002 ecx=020e9f54 edx=00000011 esi=00000000 edi=00000000...

friendly-exec.txt

lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0...

LogMeIn Remote Access Utility - ActiveX Memory Corruption (Denial of Service)

LogMeIn Remote Access Utility - ActiveX Memory Corruption Denial of Service LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com...

Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)

----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk...

Najdi.si Toolbar ActiveX Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================== Najdi.si Toolbar ActiveX Remote Buffer Overflow PoC =================================================== ----------------------------------------------------------------------------- Najdi.si...

Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.

I Security Issuesa. Setting ActiveX killbitStarting from this release, VMware has set the killbit on itsActiveX controls. Setting the killbit ensures that ActiveXcontrols cannot run in Internet Explorer IE, and avoidsMicrosoft KB article 240797 and the related references on thistopic.Security...

Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)

Najdi.si Toolbar - ActiveX Remote Buffer Overflow PoC ----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written...

Ultra Office Control 'HttpUpload()'方法缓冲区溢出漏洞

BUGTRAQ ID: 30861 CNCAN ID：CNCAN-2008061008 Ultra Office Control是一款用于VB, VB.Net, C或HTML应用程序中的Office ActiveX控件。 Ultra Office Control 'HttpUpload'方法不正确处理参数数据，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 'HttpUpload'方法接收如下三个参数： Function HttpUpload ByVal strUrl As String , ByVal strFile As String , ByVal strPostData As...