CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler 사용 후 해제 1. PDF 형식 배경 2. 암호화 사전 3. 취약점 세부 정보 4. ASLR 및 DEP 우회 5. 환경 세부 정보 6. 트리거 7. 작성자 PDF 형식 배경 PDF는 문서를 나타내는 데 사용되는 파일 형식입니다. PDF는 여러 데이터 객체로 구성됩니다. 단순 기본 객체 Integer, Number, Boolean, Null 복합 객체 Format| Name ---|--- .| Array .| String | Dictionary | Hex...

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass

-Win10-x64-CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass 내 버전 - Win10 x64 CloudMe-Sync-1.10.9-Buffer-Overflow-SEH-DEP-Bypass...

-CVE-2018-0834-aab-aar

샤우트아웃 @reubensammut, 넌 진짜 대단해 G. CVE-2018-0834 완전한 코드 실행. 정적 오프셋 포함, cfg, dep, aslr 우회 : 즐겨...

CVE-2021-39863

CVE-2021-39863 Adobe Acrobat Reader DC 21.005.20048.43252 32비트 이 버전 다운로드: https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/2100520048/AcroRdrDC2100520048enUS.exe ASLR, DEP 우회 CFG 우회 불가 분석 팀 블로그 팀원 블로그 - mntly Adobe root cause.pdf : CVE-2021-39863의 근본 원인 설명 ExploitPoint.c : 취약 함수 리버싱...

CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass

CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass 내 버전 - CloudMe-Sync-1.10.9---Buffer-Overflow-SEH-DEP-Bypass Win7 x64, CVE-2018-6892...

easy-file-share-7.2-exploit-CVE-2018-9059

easy-file-share-7.2-exploit-CVE-2018-9059 Easy File Sharing Web Server 7.2 - 'UserID' 내 버전 'DEP' 우회 내 버전 그 위에...

Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958

커스텀 익스플로잇 : Foxit Reader 버전 9.0.1.1049 힙에서 ASLR 및 DEP 우회를 포함한 사용 후 해제Use After Free 내 커스텀 익스플로잇 : Foxit-Reader-RCE-with-virualalloc-and-shellcode-for-CVE-2018-9948-and-CVE-2018-9958 Win 7용 커스텀 익스플로잇 셸코드 저장 공간 포함 내 커스텀 ROP 체인이 힙에서 셸코드 공간을 확보함 Win 7용...

CVE-2009-0182

VUPlayer 2.49 로컬 버퍼 오버플로를 통한 임의 코드 실행 프로그램 버전: VUPlayer 2.49 취약점: .wax 재생 목록 파일을 가져올 때 로컬 버퍼 오버플로가 발생하여 임의 코드 실행으로 이어짐 공격 방법: 로컬 버퍼 오버플로 CVE: CVE-2009-0182 VUPlayer2.49poc.py : DEP 보호 우회 없음 VUPlayer2.49pocbypassDEP.py : ROP 체인을 사용하여 DEP 보호 우회 PoC 동영상: https://youtu.be/HgD7gOgiIFE DEP 우회를 만드는 단계별...

CVE-2018-25383: Stack-based Buffer Overflow

Free MP3 CD Ripper 2.8 contains a stack-based buffer overflow vulnerability in WMA file processing that allows local attackers to bypass DEP protection via structured exception handling manipulation. Attackers can craft a malicious WMA file that triggers the overflow when loaded through the Conve...

CVE-2019-25691 Faleemi Desktop Software 1.8 Local Buffer Overflow SEH DEP Bypass

Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structured exception handling exploitation. Attackers can inject a crafted payload into the Save Path for Snapshot and Record file field t...

CVE-2019-25691: Out-of-bounds Write

Faleemi Desktop Software 1.8 contains a local buffer overflow vulnerability in the System Setup dialog that allows attackers to bypass DEP protections through structured exception handling exploitation. Attackers can inject a crafted payload into the Save Path for Snapshot and Record file field t...

CVE-2019-25485: Out-of-bounds Write

R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler cha...

CVE-2020-37043 10-Strike Bandwidth Monitor 3.9 - Buffer Overflow

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling...

Malware-Analysis-Project-SLMAIL-5.5-BOF-

Malware Analysis Project Introduction to exploit development w...

EUVD-2012-1855

Malware in sbrugna...

EUVD-2015-8456

Malware in sbrugna...

EUVD-2015-8455

Malware in sbrugna...

EUVD-2017-14504

Malware in sbrugna...

CVE-2011-10008

A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that triggers a stack overflow when processed ...

CVE-2011-10008

CVE-2011-10008 affects MPlayer Lite (r33064). A stack-based buffer overflow arises from improper bounds checking when processing M3U playlists containing long http:// URLs, exploitable via drag-and-drop to trigger an overflow. This can allow arbitrary code execution with the attacker’s privileges...