Logitech VideoCall ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the Logitech VideoCall ActiveX Control wcamxmp.dll 2.0.3470.448. By sending an overly long string to the "Start" method, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current...

AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit

No description provided by source. !-- 21.17 23/06/2007 AMX Corp. VNC ActiveX Control AmxVnc.dll 1.0.13.0 remote buffer overflow exploit / tested against IE6 on xp sp2 it found this one inside GHDB, dork by JimmyNeutron: WebControl intitle:"AMX NetLinx" description: "AMX Netlinx is a server...

Microsoft Internet Explorer Document.Domain跨域同源覆盖漏洞

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在绕过同源策略问题，远程攻击者可以利用漏洞访问其他目标域或者进行内容伪造攻击。 攻击者可以通过修改document.domain中的值，构建恶意WEB页，诱使用户访问来触发。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Citrix ICA Client for Windows 4.0...

AMX Corp. VNC ActiveX Control - AmxVnc.dll 1.0.13.0 Remote Buffer Overflow

AMX Corp. VNC ActiveX Control - AmxVnc.dll 1.0.13.0 Remote Buffer Overflow 'metasploit one, add a user "su" with pass "tzu" scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49%37%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%44%58%50%30%41%30%41%6b%41%41%54%42%41%32%41%41%32%4...

Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC

No description provided by source. Vuln Exposed by: ZhenHan.Liu Team: Ph4nt0m Security Team http://www.ph4nt0m.org Tested on: Full Patched Excel 2003 Sp2, CN http://www.milw0rm.com/sploits/06272007-2670.zip sebug.net...

AMX Corp. VNC ActiveX Control (AmxVnc.dll 1.0.13.0) BoF Exploit

Exploit for unknown platform in category remote exploits =============================================================== AMX Corp. VNC ActiveX Control AmxVnc.dll 1.0.13.0 BoF Exploit =============================================================== script language='...

CVE-2007-3463

Microsoft Windows XP SP2 allows local users, who have sessions created by another user's RunAs run as command, to kill arbitrary processes of this other user, as demonstrated by the taskkill program. NOTE: the researcher claims a vendor dispute in which the vendor states that "RunAs and UAC are...

Microsoft Excel 20002003 - Sheet Name (PoC)

Microsoft Excel 20002003 - Sheet Name PoC Vuln Exposed by: ZhenHan.Liu Team: Ph4nt0m Security Team http://www.ph4nt0m.org Tested on: Full Patched Excel 2003 Sp2, CN https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4121.zip 06272007-2670.zip milw0rm.com 2007-06-27...

HP Digital Imaging hpqxml.dll 2.0.0.133 - Arbitrary Data Write

HP Digital Imaging hpqxml.dll 2.0.0.133 - Arbitrary Data Write :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: GoodFellas Security Research Team Technical Detail saveXMLAsFile method receives a filename as an argument, with this format "c:\path\file". Proof of...

Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC

Exploit for unknown platform in category dos / poc ====================================================== Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC ====================================================== Tested on: Full Patched Excel 2003 Sp2, CN http://www.inj3ct0r.com/sploits/6415.z...

CVE-2007-3406

CVE-2007-3406 affects Microsoft Internet Explorer 6 on Windows XP SP2. It describes multiple absolute path traversal vulnerabilities allowing remote access to arbitrary local files via the file: URI or related attributes/tags (src in bgsound, input, EMBED, img, script; data in object; value in pa...

Safari Bookmarks Buffer Overflow Vulnerability

Safari 3.0.2 522.13.1 OS Windows XP SP2 At processing title field, which consists more than 1024 bytes at addition in a bookmark there is a buffer overflow. html head...

CVE-2006-7206

Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service crash by creating a ADODB.Recordset object and making a series of calls to the NextRecordset method with a long string argument, which causes an "invalid memory access" in the SysFreeString...

Internet Download Accelerator ActiveX ActiveX控件缓冲区溢出漏洞

Internet Download Accelerator是一款网络下载工具。 Internet Download Accelerator包含的idaiehlp.dll ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 idaiehlp.dll包含的ActiveX控件处理参数存在缓冲区溢出，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 WestByte Internet Download Accelerator 5.2 目前没有解决方案提供： http://www.westbyte.com/...

php523-overflow.txt

?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow poc win //rgod //site: retrogod.altervista.org //quickly tested on xp sp2, worked both from the cli and on apache //let's have a look here: http://www.google.com/codesearch?hl=it&q=+tidyparsestring&sa=N if...

mso-dos.txt

MSODataSourceControl.DeleteRecordSourceIfUnused COM-object B0F POC Tested on full patched XP/SP2, IE7, MSO2003 var b = 'AAAA'; while b.length...

Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)

No description provided by source. MSODataSourceControl.DeleteRecordSourceIfUnused COM-object B0F POC Tested on full patched XP/SP2, IE7, MSO2003 html object id=ctl classid="clsid:0002E55B-0000-0000-C000-000000000046"/object script language="javascript" var b = 'AAAA'; while b.length = 256 b+=b;...

Microsoft Office - MSODataSourceControl COM-object Buffer Overflow (PoC)

Microsoft Office - MSODataSourceControl COM-object Buffer Overflow PoC MSODataSourceControl.DeleteRecordSourceIfUnused COM-object B0F POC Tested on full patched XP/SP2, IE7, MSO2003 var b = 'AAAA'; while b.length milw0rm.com 2007-06-13...

Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)

No description provided by source. !-- 6.30 10/06/2007 Microsoft Windows DirectSpeechSynthesis Module XVoice.dll 4.0.4.2512 / DirectSpeechRecognition Module Xlisten.dll 4.0.4.2512 remote buffer overflow exploit/ xp sp2 version both dlls are vulnerable, this is the poc for the first one...

Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)

Exploit for unknown platform in category remote exploits ================================================================ Microsoft Speech API ActiveX control Remote BoF Exploit xp sp2 ================================================================ REM metasploit, add a user 'su' with pass 'tzu'...