[] NeoSense

Xunlei XPPlayer 5.9.14.1246 - ActiveX Remote Execution (PoC)

Author: superli
type: dos
platform: windows
port: 
date_added: 2010-01-16 
date_updated:  
verified: 1 
codes: OSVDB-64386 
tags: 
aliases: Xunlei_XPPlayer_ActiveX_Remote_Exec_0day_POC.zip 
screenshot_url:  
application_url: http://www.exploit-db.comThunder5.9.14.1246.exe

# Author: superli
# Version: <= 5.9.14.1246
# Tested on: xpsp3 ie6
# Greeting to Xunlei Security Center guys,your guys still not yet # release patch or new version to fix the vunl which also can #attack Xunlei KanKan Player(http://dl.xunlei.com/xmp.html).
# I exposed this vunl two weeks ago,are you really responsible for # the security of millions users?
# Code :

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11176.zip (Xunlei_XPPlayer_ActiveX_Remote_Exec_0day_POC.zip)