74 matches found
MetaProducts MetaTreeX 1.5.100 File Overwrite
Author : Houssamix MetaProducts MetaTreeX V 1.5.100 Remote File Overwrite Exploit Note : SaveToFile is vuln to / Report for Clsid: 67E66985-F81A-11D6-BC0F-F7B40157DC26 RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety: Vrai IDisp Safe: Safe for untrusted: caller,dat...
MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit
Exploit for unknown platform in category remote exploits =============================================================== MetaProducts MetaTreeX V 1.5.100 ActiveX File Overwrite Exploit =============================================================== Author : Houssamix MetaProducts MetaTreeX V...
MetaProducts MetaTreeX 1.5.100 - ActiveX File Overwrite
Author : Houssamix MetaProducts MetaTreeX V 1.5.100 Remote File Overwrite Exploit Note : SaveToFile is vuln to / Report for Clsid: 67E66985-F81A-11D6-BC0F-F7B40157DC26 RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety: Vrai IDisp Safe: Safe for untrusted: caller,dat...
PDFBuilderX ActiveX控件SaveToFile()方式任意文件覆盖漏洞
BUGTRAQ ID: 33233 PDFBuilderX是用于创建和保存PDF文件的ActiveX控件。 PDFBuilderXTrial.PDFDoc ActiveX控件（PDFBuilderXTrial.ocx）没有正确地验证对SaveToFile方式所提供的输入，如果用户受骗访问了恶意网页并向该方式传送了恶意参数的话，就可能导致向系统上写入任意文件。 Ciansoft PDFBuilderX 2.2.0.1 临时解决方法： 为受影响的ActiveX控件设置kill-bit。 厂商补丁： Ciansoft --------...
CVE-2008-4749
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...
Design/Logic Flaw
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...
CVE-2008-4749
Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...
CVE-2008-4749
The CVE-2008-4749 issue affects DB Software Laboratory’s VImpX.VImpAX ActiveX control (VImpX.ocx) version 4.8.8.0 (possibly 4.7.7). The vulnerability arises from insecure methods that let remote attackers overwrite arbitrary files via the LogFile property and ClearLogFile method, and via the Save...
VImpX.ocx ActiveX控件多个文件破坏漏洞
BUGTRAQ ID: 31907 VImpX ActiveX控件允许跨表格或ODBC数据源将数据导入到Oracle、SQL Server或ODBC数据库中。 VImpX.ocx ActiveX控件（VImpX.ocx，CLSID...
Remote code execution
The Chilkat XML ChilkatUtil.CkData.1 ActiveX control ChilkatUtil.dll 3.0.3.0 and earlier allows remote attackers to create, overwrite, and modify arbitrary files for execution via a call to the 1 SaveToFile, 2 SaveToTempFile, or 3 AppendBinary method. NOTE: this issue might only be exploitable in...
Chilkat XML ActiveX Remote Arbitrary File Creation/Execution Exploit
No description provided by source. ----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID:...
Chilkat XML - ActiveX Arbitrary File CreationExecution
Chilkat XML - ActiveX Arbitrary File CreationExecution ----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42...
chilkat-exec.txt
----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID: ChilkatUtil.CkData.1 Descr.: Chilkat CkData Marke...
Chilkat XML ActiveX Remote Arbitrary File Creation/Execution Exploit
Exploit for unknown platform in category remote exploits ==================================================================== Chilkat XML ActiveX Remote Arbitrary File Creation/Execution Exploit ====================================================================...
Chilkat XML - ActiveX Arbitrary File Creation/Execution
----------------------------------------------------------------------------- Chilkat XML ActiveX Remote Arbitrary File Creation/Execution url: www.chilkatsoft.com File: ChilkatUtil.dll = 3.0.3.0 CLSID: 5022FAE8-B780-4B78-B8DC-1AF1145A4F42 ProgID: ChilkatUtil.CkData.1 Descr.: Chilkat CkData Marke...
[NSG_28-5-08] CA Internet Security Suite 2008 (UmxEventCli.dll/SaveToFile()) remote file corruption poc
!-- CA Internet Security Suite 2008 UmxEventCli.dll/SaveToFile remote file corruption poc by Nine:Situations:Group::surfista this control is safe for scripting and safe for initialize original one: http://retrogod.altervista.org/9sgCApoc.html -- htmlobject...
CA Internet Security Suite 2008 SaveToFile() File Corruption PoC
Exploit for unknown platform in category dos / poc ================================================================ CA Internet Security Suite 2008 SaveToFile File Corruption PoC ================================================================ filePath="..............\boot.ini"...
CA Internet Security Suite 2008 SaveToFile()File Corruption PoC
No description provided by source. !-- CA Internet Security Suite 2008 UmxEventCli.dll/SaveToFile remote file corruption poc by Nine:Situations:Group::surfista this control is safe for scripting and safe for initialize original one: http://retrogod.altervista.org/9sgCApoc.html -- htmlobject...
CA Internet Security Suite 2008 - 'SaveToFile()' File Corruption (PoC)
filePath="..............\boot.ini" UmxEventCliLib.SaveToFile filePath milw0rm.com 2008-05-28...
Path traversal
Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run...