Hummingbird Deployment Wizard 2008 - ActiveX File Execution(2)

-------------------------------------------------------------------------------- Hummingbird Deployment Wizard 2008 DeployRun.dll Arbitrary File Execution2 url: http://www.hummingbird.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for educational...

hummingbird-poc.txt

arg1="001101220123012401250126012701280129012:012;012012?012@012A012B012C012D012E012FXXXX" target.PlainTextPassword = arg1...

Hummingbird <= 13.0 ActiveX Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ====================================================== Hummingbird arg1="001101220123012401250126012701280129012:012;012email protected" target.PlainTextPassword = arg1 0day.today 2018-02-16...

Microsoft IE componentFromPoint内存破坏漏洞（MS08-058）

BUGTRAQ ID: 31617 CVECAN ID: CVE-2008-3475 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer在实现暴露给JavaScript的componentFromPoint时允许特定的对象任意控制内存访问。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0...

Hummingbird HostExplorer 6.28.0 - ActiveX Control PlainTextPassword() Remote Buffer Overflow

Hummingbird HostExplorer 6.28.0 - ActiveX Control PlainTextPassword Remote Buffer Overflow source: https://www.securityfocus.com/bid/31783/info Hummingbird HostExplorer ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on...

Hummingbird 13.0 - ActiveX Remote Buffer Overflow (PoC)

Hummingbird 13.0 - ActiveX Remote Buffer Overflow PoC arg1="001101220123012401250126012701280129012:012;012012?012@012A012B012C012D012E012FXXXX" target.PlainTextPassword = arg1 milw0rm.com 2008-10-16...

Hummingbird HostExplorer 6.2/8.0 - ActiveX Control 'PlainTextPassword()' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/31783/info Hummingbird HostExplorer ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary code in the contex...

Hummingbird 13.0 - ActiveX Remote Buffer Overflow (PoC)

arg1="001101220123012401250126012701280129012:012;012012?012@012A012B012C012D012E012FXXXX" target.PlainTextPassword = arg1 milw0rm.com 2008-10-16...

CVE-2008-4584

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method...

CVE-2008-4583

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method...

CVE-2008-4586

Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control isusweb.dll 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method...

CVE-2008-4587

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control ISDM.exe 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this...

CVE-2008-4587

Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control ISDM.exe 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the AddFile and RunScheduledJobs methods. NOTE: this...

CVE-2008-4584

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method...

Security feature bypass

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method...

Security feature bypass

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method...

Design/Logic Flaw

Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control isusweb.dll 6.1.100.61372 in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExecute method...

CVE-2008-4583

CVE-2008-4583 affects the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll). The SavePkcs8File method allows a full pathname, enabling remote attackers to overwrite arbitrary files. CVSSv2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). References indicate public discussion/exploits exist; no reme...

CVE-2008-4586

In CVE-2008-4586, the affected product is Macrovision FLEXnet Connect 6.1, specifically the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372). The issue is an insecure method vulnerability that allows remote attackers to force the download and execution of arbitrary file...

CVE-2008-4587

CVE-2008-4587 describes an insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) of Macrovision FLEXnet Connect 6.1. An attacker could force the download and execution of arbitrary files via AddFile and RunScheduledJobs, wit...