Ecava IntegraXor Remote ActiveX Buffer Overflow PoC

No description provided by source. !/usr/bin/python intx.py Ecava IntegraXor Remote ActiveX Buffer Overflow PoC Jeremy Brown December 2010 http://www.integraxor.com/ There is a stack-based buffer overflow in IntegraXor that can be triggered by passing an overly large value to the save method of t...

LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0day

No description provided by source. html object classid='clsid:8AEEAB4A-E1DA-4354-B800-8F0B553770E1' id='target'//object script var sofa = ..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta; var king = Oh noz, Look what DrIDE...

RealPlayer rmoc3260.dll ActiveX Control Heap Corruption

No description provided by source. $Id: realplayerconsole.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

Adobe Flash Player 11.3 Font Parsing Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

GameHouse dldisplay ActiveX control 0,Real Server 5.0/7.0 Internal IP Address Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/1049/info By default, Real Server includes the IP address of the server in data sent to the client. If the Real Server is installed on a machine in a NAT environment, where requests from the outside network are handled by...

RSP MP3 Player OCX 3.2 ActiveX Buffer Overflow

No description provided by source. html object classid='clsid:3C88113F-8CEC-48DC-A0E5-983EF9458687' id='target'/object script language='vbscript' ' Exploit Title: RSP MP3 Player OCX 3.2 ActiveX Buffer Overflow ' Date: July 9, 2010 ' Author: Blake ' Software Link:...

Juniper SSL-VPN IVE JuniperSetupDLL.dll ActiveX Control Buffer Overflow

No description provided by source. $Id: junipersslvpnivesetupdll.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Honeywell HSC Remote Deployer ActiveX Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Chilkat Socket activex 2.3.1.1 - Remote Arbitrary File Creation Exploit

No description provided by source. html titleChilkatSocket.DLL Arbitrary File Creation/titlebrbr body Company Name : Chilkat Software, Inc.brbr Vulnerable DLL : ChilkatSocket.DLLbrbr DLL's version : 2,3,1,1brbr Object Safety Report : br Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289Cbr...

NTR ActiveX Control Check() Method Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

RKD Software BarCodeAx.dll 4.9 - ActiveX Remote Stack Buffer Overflow

No description provided by source. $Id: barcodeax49.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

SasCam WebCam Server 2.6.5 - ActiveX SEH Overwrite

No description provided by source. html object classid='clsid:0297D24A-F425-47EE-9F3B-A459BCE593E3' id='target'/object script language = 'vbscript' 'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in virtualbox '$ nc 192.168.1.155 4444 'Microsoft Windows XP...

Trend Micro Internet Security Pro 2010 ActiveX extSetOwner() Remote Code Execution

No description provided by source. $Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow

No description provided by source. $Id: nis2004get.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Oracle Document Capture 10.1.3.5 Insecure Method / Buffer Overflow

No description provided by source. Source: http://packetstormsecurity.org/files/view/97871/DSECRG-11-006.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-006 internal DSECRG-09-066 Application: Oracle Document Capture Versions Affected:...

NetSprint Ask IE Toolbar 1.1 - Multiple Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23535/info NetSprint Ask IE Toolbar ActiveX control is prone to multiple denial-of-service vulnerabilities. Exploiting these issues allows remote attackers to crash applications that employ the vulnerable controls typical...

Pegasus Imaging ThumbnailXpress 1.0 - Remote Arbitrary File Deletion

No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbolbody bgcolor=E0E0E0----------------------------------------------------------------------------- bPegasus Imaging ThumbnailXpress 1.0 Remote Arbitrary File Deletion/b url:...

VeryPDF PDFView OCX ActiveX OpenPDF Heap Overflow

No description provided by source. $Id: verypdfpdfview.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Microsoft Internet Explorer 5/6 GetObject File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3767/info A flaw exists in Microsoft Internet Explorer that may allow a remote attacker to view known files on a target system when a user views web content containing a specially crafted script. The problem occurs when t...

Quest InTrust 10.4.x ReportTree and SimpleTree Classes

No description provided by source. Quest InTrust 10.4.x ReportTree and SimpleTree Classes ArDoc.dll ActiveX Control Remote File Creation / Overwrite homepage: http://www.quest.com/intrust/ description: InTrust securely collects, stores, reports and alerts on event log data from Windows, Unix and...