Lenovo Hotkey Driver <= 5.33 - Privilege Escalation

No description provided by source. Author: Chilik Tamir - Amdocs Power Security Testing Group Website: http://invalid-packet.blogspot.com/2010/03/full-disclosure-security-vulnerability.html Subject: Security vulnerability Privilege escalation in Lenovo Hotkey Driver and Access Connections version...

MagnetoSoft ICMP 4.0.0.18 - ActiveX AddDestinationEntry BOF

No description provided by source. html object classid='clsid:3A86F1F2-4921-4C75-AF2C-A1AA241E12BA' id='target'/object script language='vbscript' 'Magneto Software ICMP ActiveX Control Buffer Overflow 'Discovered by: s4squatch 'website: www.securestate.com 'Date Discovered: 03/11/09 'Exploit...

Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute

No description provided by source. $Id: symantecappstreamunsafe.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Real Networks GameHouse dldisplay ActiveX control 0 Port Buffer Overflow (2)

No description provided by source. source: http://www.securityfocus.com/bid/767/info At installation, the Real Server software randomly selects an unused port as the remote administration port. This port is used by Real Server's remote web administration feature. To access this feature, the corre...

Oracle WebCenter Content CheckOutAndOpen.dll ActiveX Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Cisco AnyConnect VPN Client ActiveX URL Property Download and Execute

No description provided by source. $Id: ciscoanyconnectexec.rb 12872 2011-06-06 20:15:51Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Microsoft Internet Explorer 6.0 New ActiveX Object String Concatenation Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30219/info Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature...

Qvod Player 2.1.5 'QvodInsert.dll' ActiveX Control Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27271/info Qvod Player 'QvodInsert.dll' ActiveX control is prone to is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully...

Citrix Presentation Server Client WFICA.OCX ActiveX - Heap BOF Exploit

No description provided by source. !-- Citrix Presentation Server Client WFICA.OCX ActiveX Component Heap Buffer Overflow Exploit Vulnerability discovered by Andrew Christensen and Aaron Portnoy http://www.securityfocus.com/bid/21458 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6334...

Citrix Presentation Server Client 9.200 WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21458/info Citrix Presentation Server Client is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An...

MetaProducts MetaTreeX 1.5.100 - ActiveX File Overwrite Exploit

No description provided by source. HTML BODY b Author : Houssamix br/ br/ br/ MetaProducts MetaTreeX V 1.5.100 Remote File Overwrite Exploit br/ Note : SaveToFile is vuln to br/ b/ object id=hsmx classid=clsid:67E66985-F81A-11D6-BC0F-F7B40157DC26/object SCRIPT / Report for Clsid:...

Internet Explorer 8 (Multitudinous looping) Denial of Service Exploit

No description provided by source. ======================================================================= Internet Explorer 8 Multitudinous looping Denial of Service Exploit ======================================================================= by Asheesh Kumar Mani Tripathi code by Asheesh kum...

Magneto Net Resource ActiveX 4.0.0.5 - NetShareEnum Exploit (Universal)

No description provided by source. html object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' //object script language='vbscript' 'Magneto Net Resource ActiveX v4.0.0.5 NetShareEnum Exploit Universal 'Author: dookie 'Original PoC by: s4squatch -...

Roxio CinePlayer 3.2 SonicDVDDashVRNav.DLL ActiveX Control Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23412/info Roxio CinePlayer is prone to a stack-based buffer-overflow vulnerability because it fails to sufficiently check boundaries of user-supplied input before copying it to an insufficiently sized memory buffer. A...

McAfee Subscription Manager Stack Buffer Overflow

No description provided by source. $Id: mcafeemcsubmgrvsprintf.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Microsoft OWC Spreadsheet msDataSourceObject Memory Corruption

No description provided by source. $Id: ms09043owcmsdso.rb 9893 2010-07-20 23:28:47Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Ask.com Toolbar askBar.dll ActiveX Control Buffer Overflow

No description provided by source. $Id: askshortformat.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

BitDefender Antivirus 2008 bdelev.dll ActiveX Control Double Free Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26824/info A BitDefender Antivirus 2008 ActiveX control is prone a double-free vulnerability because of a flaw in the way that the 'bdelev.dll' library handles certain object data prior to returning it. Successfully...

SAMSUNG NET-i Viewer 1.37 SEH Overwrite

No description provided by source. html object classid='clsid:FA6E2EA9-D816-4F00-940B-609C9E8847A4' id='target' /object script language='vbscript' ' Exploit Title: SAMSUNG NET-i viewer ActiveX SEH Overwrite ' Date: April 30 2012 ' Author: Blake ' Software Link:...

ICONICS WebHMI ActiveX Buffer Overflow

No description provided by source. $Id: iconicswebhmisetactivexguid.rb 12584 2011-05-11 20:45:54Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...