CVE-2008-4728

This exploit demonstrates a vulnerability in Hummingbird Deployment Wizard 2008 (DeployRun.dll) where the `SetRegistryValueAsString` method can be abused to create or modify registry values. The PoC uses VBScript to invoke the method via an ActiveX object, potentially allowing arbitrary registry manipulation.

This exploit leverages an unsafe ActiveX control (DeployRun.dll) in Hummingbird Deployment Wizard 2008 to execute arbitrary commands via the PerformUpdateAsync method. The PoC demonstrates execution of calc.exe but could be adapted to run any executable or download remote payloads.

This exploit leverages an unsafe ActiveX control (DeployRun.dll) in Hummingbird Deployment Wizard 2008 to execute arbitrary commands via the `Run` method. The PoC demonstrates command execution by launching `calc.exe` through `cmd.exe` when a button is clicked in a malicious HTML page.