-CVE-2018-0834-aab-aar

致谢 @reubensammut，你是个狠人，兄弟。CVE-2018-0834 完整代码执行。包含静态偏移量，绕过 cfg、dep、aslr : 享用。...

CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler 释放后使用 1. PDF 格式背景 2. 加密字典 3. 漏洞详情 4. 绕过 ASLR 和 DEP 5. 环境详情 6. 触发 7. 作者 PDF 格式背景 PDF 是一种用于表示文档的文件格式。一个 PDF 由多个数据对象组成 简单基本对象 整数、数值、布尔值、Null 复杂对象...

CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32位 下载此版本：https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe 绕过ASLR、DEP 无法绕过CFG 分析 团队博客 团队成员博客 - mntly Adobe root cause.pdf：解释CVE-2021-39863的根本原因 ExploitPoint.c：逆向漏洞函数 exploit.pdf：漏洞利用PDF...

CVE-2009-0182

VUPlayer 2.49 Desbordamiento de búfer local para ejecución arbitraria de código Versión del programa: VUPlayer 2.49 Vulnerabilidad: desbordamiento de búfer local al importar un archivo de lista de reproducción .wax que conduce a la ejecución arbitraria de código Explotación: Desbordamiento de búf...

Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

自定义漏洞利用：Foxit Reader 9.0.1.1049 版本中的释放后重用漏洞及绕过 ASLR 和 DEP 的堆利用 我的自定义漏洞利用：Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 针对 Win 7 的自定义利用 留有 shellcode 空间 我的自定义 ROP 链在堆中为 shellcode 腾出空间 针对 Win 7...

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass 我的版本 - Win10 x64 CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass...

CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass

CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass 我的版本 - CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass on Win7 x64 CVE-2018-6892...

easy-file-share-7.2-exploit-CVE-2018-9059

easy-file-share-7.2-exploit-CVE-2018-9059 Easy File Sharing Web Server 7.2 - 'UserID' mi versión, bypass de 'DEP' mi versión sobre ello Probado en Win 7 Ultimate x86...

CVE-2019-25691 Faleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass

Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structured exception handling exploitation. Attackers can inject a crafted payload into the Save Path for Snapshot and Record file field t...

CVE-2020-37043 10-Strike Bandwidth Monitor 3.9 - Buffer Overflow

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling...

Malware-Analysis-Project-SLMAIL-5.5-BOF-

Malware Analysis Project Introduction to exploit development w...

EUVD-2012-1855

Malware in sbrugna...

EUVD-2015-8456

Malware in sbrugna...

EUVD-2015-8455

Malware in sbrugna...

EUVD-2017-14504

Malware in sbrugna...

CVE-2011-10008

A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that triggers a stack overflow when processed ...

CVE-2011-10008

CVE-2011-10008 affects MPlayer Lite (r33064). A stack-based buffer overflow arises from improper bounds checking when processing M3U playlists containing long http:// URLs, exploitable via drag-and-drop to trigger an overflow. This can allow arbitrary code execution with the attacker’s privileges...

PT-2025-31529 · Undefined · Undefined

A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that triggers a stack overflow when processed ...

CVE-2013-2554

Unspecified vulnerability in Microsoft Windows 7 allows attackers to bypass the ASLR and DEP protection mechanisms via unknown vectors, as demonstrated against Firefox by VUPEN during a Pwn2Own competition at CanSecWest 2013, a different vulnerability than CVE-2013-0787...

MPlayer Lite r33064 Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MPlayer Lite M3U Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in MPlayer Lite r33064,...