Friendly Technologies - fwRemoteCfg.dll ActiveX Remote Buffer Overflow

Friendly Technologies - fwRemoteCfg.dll ActiveX Remote Buffer Overflow Friendly Technologies - wayyy too friendly... function exploit var Evil = ""; // Our Evil Buffer var DamnIE = "\x0C\x0C\x0C\x0C"; // Damn IE changes address when not in the 0x00 - 0x7F range : // Need to use heap spray rather...

Ultra Office Control 'Save()'方法任意文件覆写漏洞

BUGTRAQ ID: 30863 CNCAN ID：CNCAN-2008061007 Ultra Office Control是一款用于VB, VB.Net, C或HTML应用程序中的Office ActiveX控件。 Ultra Office Control "Save"方法不正确处理参数数据，远程攻击者可以利用漏洞以应用程序权限覆盖系统任意文件。 "Save"方法接收如下四个参数： Sub Save ByVal SaveAsDocument As Variant , ByVal OverwriteExisting As Variant , ByVal WebUsername As...

Friendly Technologies - fwRemoteCfg.dll ActiveX Command Execution

Friendly Technologies - fwRemoteCfg.dll ActiveX Command Execution lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0 milw0rm.com 2008-08-28...

Ultra Office ActiveX Control Remote Arbitrary File Corruption Exploit

No description provided by source. ----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Arbitrary File Corruption url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This...

Friendly Technologies (fwRemoteCfg.dll) ActiveX Command Exec Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Friendly Technologies fwRemoteCfg.dll ActiveX Command Exec Exploit ==================================================================== lamers.RunApp "cmd" ,"cmd /k echo S...

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Command Execution

lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0 milw0rm.com 2008-08-28...

Friendly Technologies (fwRemoteCfg.dll) ActiveX Remote BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================== Friendly Technologies fwRemoteCfg.dll ActiveX Remote BOF Exploit ================================================================== Friendly Technologies - wayyy too...

Ultra Office ActiveX Control Remote Buffer Overflow Exploit

No description provided by source. ----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Buffer Overflow url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for...

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Remote Buffer Overflow

Friendly Technologies - wayyy too friendly... function exploit var Evil = ""; // Our Evil Buffer var DamnIE = "\x0C\x0C\x0C\x0C"; // Damn IE changes address when not in the 0x00 - 0x7F range : // Need to use heap spray rather than overwrite EIP ... // Skyland win32 bindshell 28876/tcp shellcode v...

Stack overflow

Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the 1 BuildPath, 2 GetDriveName, 3 DriveExists, or 4 DeleteFile method...

CVE-2007-1682

Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the 1 BuildPath, 2 GetDriveName, 3 DriveExists, or 4 DeleteFile method...

CVE-2007-1682

Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the 1 BuildPath, 2 GetDriveName, 3 DriveExists, or 4 DeleteFile method...

CVE-2007-1682

SoftArtisans XFile FileManager ActiveX control (SAFmgPws.dll) is affected by CVE-2007-1682 through vulnerable BuildPath(), GetDriveName(), DriveExists(), and DeleteFile() methods. The vulnerability is a stack-based buffer overflow in XFile before version 2.4.0 that could allow remote code executi...

ultra-corrupt.txt

----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Arbitrary File Corruption url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpos...

VMSA-2008-0014:Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.

VMSA-2008-0014.3 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0014.3 VMware Security...

Ultra Office - ActiveX Control Arbitrary File Corruption

----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Arbitrary File Corruption url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpos...

Ultra Shareware Office Control - ActiveX Control Remote Buffer Overflow

----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Buffer Overflow url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational purpose. Use it at your...

Ultra Shareware Office Control - ActiveX Control Remote Buffer Overflow

Ultra Shareware Office Control - ActiveX Control Remote Buffer Overflow ----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Buffer Overflow url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Novell iPrint Client < 5.40 Multiple ActiveX Control Vulnerabilities

Novell iPrint Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mvs-activex.txt

Microsoft Visual Studio Msmask32.ocx ActiveX Remote Buffer Overflow Exploit Author: Koshi Original POC: http://www.milw0rm.com/exploits/6244 Not by me My first ActiveX exploit, learned quite a bit playing with this one. Heaps are handy. Loaded File: C:\WINDOWS\system32\MSMASK32.OCX Name: MSMask...