Foxit Reader 3.1.4.1125 - ActiveX Heap Overflow (PoC)

Foxit Reader 3.1.4.1125 - ActiveX Heap Overflow PoC Vendor :www.foxitsoftware.com tested on :windows 7 Foxit Reader Version 3.1.4.1125 targetFile = "C:\Program Files\Foxit Software\Foxit Reader\plugins\FoxitReaderOCX.ocx" prototype = "Function OpenFile ByVal strFilePath As String As Boolean"...

Microsoft Windows Defender - ActiveX Heap Overflow (PoC)

Microsoft Windows Defender - ActiveX Heap Overflow PoC Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC tested on :windows 7 Microsoft Windows Defender targetFile = "C:\Program Files\Windows Defender\MsMpCom.dll" prototype = "Sub DeleteValue ByVal bstrKeyName As String , ByVal...

Microsoft Windows Defender - ActiveX Heap Overflow (PoC)

Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC tested on :windows 7 Microsoft Windows Defender targetFile = "C:\Program Files\Windows Defender\MsMpCom.dll" prototype = "Sub DeleteValue ByVal bstrKeyName As String , ByVal bstrValueName As String " memberName = "DeleteValue"...

Foxit Reader v3.1.4.1125 ActiveX Heap Overflow PoC

Exploit for unknown platform in category dos / poc ================================================== Foxit Reader v3.1.4.1125 ActiveX Heap Overflow PoC ================================================== Vendor :www.foxitsoftware.com tested on :windows 7 Foxit Reader Version 3.1.4.1125 targetFile...

Microsoft Windows NT/2000/2003/2008/XP/Vista/7 - 'KiTrap0D' User Mode to Ring Escalation (MS10-015)

Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11199.zip KiTrap0D.zip E-DB Note: Make sure to run "vdmallowed.exe" pre-compiled inside the subfolder. Microsoft Windows NT GP Trap Handler Allows Users to Switch Kernel Stack...

Foxit Reader 3.1.4.1125 - ActiveX Heap Overflow (PoC)

Vendor :www.foxitsoftware.com tested on :windows 7 Foxit Reader Version 3.1.4.1125 targetFile = "C:\Program Files\Foxit Software\Foxit Reader\plugins\FoxitReaderOCX.ocx" prototype = "Function OpenFile ByVal strFilePath As String As Boolean" memberName = "OpenFile" progid =...

Microsoft Internet Explorer 678 - Shockwave Flash Object Denial of Service

Microsoft Internet Explorer 678 - Shockwave Flash Object Denial of Service Version: 6/7/8 Tested on: Windows XP SP3 English & Windows 7 CVE : Code: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/11182.tar.gz iecrash.tar.gz Description: Modified 1360. byte to 44...

Microsoft Internet Explorer 6/7/8 - Shockwave Flash Object Denial of Service

Version: 6/7/8 Tested on: Windows XP SP3 English & Windows 7 CVE : Code: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11182.tar.gz iecrash.tar.gz Description: Modified 1360. byte to 44, 1361. to 43, 1362. 42, 1363. byte to 41 of a sample swf file, ran it and...

Internet Explorer wshom.ocx Active-X Code Execution

IE ActiveX remote bof remote code excution version: all versions Author: germayax & D3V!L FUCKER special thanx: for my best friend his0k4. Geetz 2 :Sarbot511 ,thrid-devil. tested on : windows 7 , windows vista ,windows xp sp2 arg1="c:\WINDOWS\system32\calc.exe" target.Exec arg1...

Joomla PC Local File Inclusion

Joomla Component compc LFI Vulnerability Author : Pyske Name : compc Home : www.cyber-warrior.org Greez : N0kt4 , fl0rix , F0RTS3V3N , KaBaDaYı , Blackapple All Cyber-warrior Bug Type : Local File Inlusion Demo Vuln. : http://www.cfpzanardelli.it/index.php?option=compc&controller= LFI path...

MS Internet Explorer wshom.ocx ActiveX remote code Execution 2

Exploit for unknown platform in category remote exploits ================================================================================ MS Internet Explorer wshom.ocx ActiveX remote code Execution 2 insecure method ================================================================================...

Microsoft Internet Explorer - wshom.ocx ActiveX Control Remote Code Execution

Microsoft Internet Explorer - wshom.ocx ActiveX Control Remote Code Execution IE ActiveX remote bof remote code excution version: all versions Author: germayax & D3V!L FUCKER special thanx: for my best friend his0k4. Geetz 2 :Sarbot511 ,thrid-devil. tested on : windows 7 , windows vista ,windows ...

Microsoft Internet Explorer - 'wshom.ocx' ActiveX Control Remote Code Execution

IE ActiveX remote bof remote code excution version: all versions Author: germayax & D3V!L FUCKER special thanx: for my best friend his0k4. Geetz 2 :Sarbot511 ,thrid-devil. tested on : windows 7 , windows vista ,windows xp sp2 arg1="c:\WINDOWS\system32\calc.exe" target.Exec arg1...

MS Internet Explorer wshom.ocx ActiveX Control Remote Code Execution

Exploit for unknown platform in category remote exploits ================================================== IE wshom.ocx ActiveX Control Remote Code Execution ================================================== IE ActiveX remote bof remote code excution version: all versions tested on : windows 7 ...

Memory corruption

Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessin...

Immunity Canvas: AURORA_FLASH

Name| auroraflash ---|--- CVE| CVE-2010-0249 Exploit Pack| CANVAS Description| Aurora vulnerability with ActionScript JIT spraying for IE8 and Windows 7 Notes| CVE Name: CVE-2010-0249 VENDOR: Microsoft VersionsAffected: Repeatability: References: MS10-002 CVE Url: Date public: 01/21/2001 CVSS: 9....

Google Attackers Used Internet Explorer Zero Day

Several of the companies victimized in the attack that hit Google and dozens of other companies recently were compromised through the use of a new, unpatched vulnerability in Internet Explorer, experts say. The flaw was used in a sophisticated attack that included victims receiving targeted email...

CVE-2010-0278

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

Session fixation

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service msnmsgr.exe crash by calling the ViewProfile method with a crafted argument during an MSN Messenger...

Windows Live Messenger 2009 ActiveX DoS Vulnerability

No description provided by source. Product: Windows Live Messenger 2009 Build 14.0.8089.726 Vulnerability: ActiveX - Denial of Service Discussion: Vulnerability is in Activex Controlmsgsc.14.0.8089.726.dll Sending a string to ViewProfile , cause a crash on msnmsgr.exe must be signed in Msn...