167 matches found
Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://an.baidu.com/ Version: 2.0 Tested on: xpsp3 ie6 Greeting to all the guys of Baidu Security Center,please dont use Kingsoft sht t...
TrendMicro Web-Deployment ActiveX Remote Exec 0day POC
Exploit for unknown platform in category remote exploits ====================================================== TrendMicro Web-Deployment ActiveX Remote Exec 0day POC ====================================================== Exploit Title: TrendMicro Web-Deployment ActiveX Remote Exec 0day POC Date:...
Xunlei Aplayer ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: Xunlei Aplayer ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://down.sandai.net/Thunder5.9.14.1246.exe Version: 5.9.14.1246 Tested on: xpsp3 ie6 Code : object id=TestObj...
PPmate PMChannel and CTVUAxCtrl ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: PPmate PMChannel and CTVUAxCtrl ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://www.ppmate.com Version: 2.3.3.6 Tested on: xpsp3 ie6 Code : object id=TestObj classid="CLSID:2BE6A92D-D51C-4659-B372-BB18C99BC439"...
UUSee ReliPlayer - ActiveX Remote Execution (PoC)
UUSee ReliPlayer - ActiveX Remote Execution PoC Exploit Title: UUSee ReliPlayer ActiveX Remote Exec 0day POC Author: superli Version: 2008 Tested on: xpsp3 ie6 Code : https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/11064.zip uusee.zip...
splayer XvidDecoder ActiveX Remote Exec 0day poc
No description provided by source. Exploit Title: splayer XvidDecoder ActiveX Remote Exec 0day poc Date: 2010.01.08 Author: superli Software Link: http://dl.splayer.org/SPlayerSetup.exe Version: 3.3 Tested on: xpsp3 ie6 Code : object id=TestObj classid="CLSID:E5960BC4-A76B-4211-BEEC-9AEE2AF8AAE6"...
UUSee ReliPlayer ActiveX Remote Exec 0day PoC
Exploit for unknown platform in category dos / poc ============================================= UUSee ReliPlayer ActiveX Remote Exec 0day PoC ============================================= Exploit Title: UUSee ReliPlayer ActiveX Remote Exec 0day POC Author: superli Version: 2008 Tested on: xpsp3...
SopCast SopCore Control ActiveX Remote Exec 0day PoC
Exploit for unknown platform in category dos / poc ==================================================== SopCast SopCore Control ActiveX Remote Exec 0day PoC ==================================================== Exploit Title: SopCast SopCore Control ActiveX Remote Exec 0day poc Author: superli...
SPlayer XvidDecoder 3.3 - ActiveX Remote Execution (PoC)
Author: superli Tested on: xpsp3 ie6 Code :...
SopCast SopCore Control ActiveX Remote Exec 0day poc
No description provided by source. Exploit Title: SopCast SopCore Control ActiveX Remote Exec 0day poc Date: 2010.01.08 Author: superli Software Link: http://download.sopcast.cn/download/SopCast.zip Version: 3.2.4 Tested on: xpsp3 ie6 Code : check the attachment...
UUSee ReliPlayer ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: UUSee ReliPlayer ActiveX Remote Exec 0day POC Date: 2010.01.08 Author: superli Software Link: http://download.uusee.com/UUSeeSetup2008.exe Version: 2008 Tested on: xpsp3 ie6 CVE : if exists Code : check the attachment...
UUSee ReliPlayer - ActiveX Remote Execution (PoC)
Exploit Title: UUSee ReliPlayer ActiveX Remote Exec 0day POC Author: superli Version: 2008 Tested on: xpsp3 ie6 Code : https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11064.zip uusee.zip...
HP LoadRunner 9.0 ActiveX AddFolder Buffer Overflow
$Id: hploadrunneraddfolder.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
EasyMail Objects EMSMTP.DLL 6.0.1 ActiveX Control Remote Buffer Overflow Vulnerability
No description provided by source. !-- Postcast Server Pro 3.0.61 / Quiksoft EasyMail SMTP Object emsmtp.dll 6.0.1 remote buffer overflow exploit ie6 / xp sp2 version passing more than 539 chars to SubmitToExpress method: EAX 00000400 ECX 0013DD24 ASCII "Error Creating File: AAAA ... EDX C0403FFF...
New vulnerabilities in OpenX
Hello 3APA3A! I want to warn you about Denial of Service, Cross-Site Scripting and Redirector vulnerabilities in OpenX. DoS Looped DoS: http://site/adclick.php About Looped DoS I wrote in my classification of DoS vulnerabilities in web applications http://websecurity.com.ua/2663/. Vulnerable are...
QQ security a threat-vulnerability warning-the black bar safety net
1, QQ Cookie management is not enough strict. 2, QQ Ptlogin not take any transmission encryption measures, just a local encrypted HTTP POST to the server. Hazards: 1, The only one qq. comXSSwill be able to achieve the theft of Q coins, get privacy information. See the password of the album, The...
Phorum过滤引擎HTML代码注入漏洞
BUGTRAQ: 35777 Phorum是一款基于PHP的WEB论坛程序，可在Linux和Unix操作系统下使用，也可在Microsoft Windows操作系统下使用。 Phorum的过滤引擎没有充分地验证某些BBcode参数，远程攻击者可以在所提交的请求中使用导致注入并执行恶意JavaScript代码。 Phorum 5.2.11 厂商补丁： Phorum ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.phorum.org/phorum5/read.php?64,139411...
MS Internet Explorer (Javascript SetAttribute) Remote Crash Exploit
No description provided by source. html head title Irfan Asrar/title /head body onload="c" Set Attribute Crash : Tested with IE7 Vista IE6 XP2 IE6 XP3 script type="text/javascript" function c var li = document.createElement"li"; li.setAttribute"value", "1"; li.value = "1"; /script /body /html...
Phorum : Permanent Cross-Site Scripting Vulnerabilities
//----- Advisory Program : Phorum 5.2.11 Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : crashfr at sysdream dot com This Advisory : crashfr at sysdream dot com //----- Application description Started in 1998, Phorum was the original PHP and MySQL...
Phorum <= 5.2.11 Permanent Cross Site Scripting Vulnerabilities
No description provided by source. //----- Advisory Program : Phorum 5.2.11 and prior Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : CrashFr This Advisory : CrashFr //----- Application description Started in 1998, Phorum was the original PHP and...