VehApiResolve

VehApiResolve Вдохновлено обфускацией 32-битного API Dridex Loader. Как это работает? Мы устанавливаем обработчик исключений. root@kitploit: AddVectoredExceptionHandler CALLFIRST, ApiResolverHandler ; Этот обработчик исключений будет обрабатывать только исключения, выбрасываемые как...

EATGuard

EATGuard Implementazione di una mitigazione per la protezione della Export Address Table, come l'Export Address Filtering EAF Come Funziona Questo progetto è composto da tre binari che, una volta compilati, si trovano in EATGuard\bin. Essi sono: 1. EATGuardApplication.exe - Applicazione...

CVE-2018-18912

🐞 CVE-2018-18912: Easy File Sharing Web Server 7.2 - Overflow del buffer basato su stack SEH Overflow del buffer basato su SEH in Easy File Sharing Web Server 7.2 che dimostra come un parametro HTTP POST autenticato possa corrompere la catena dei gestori di eccezioni. 📑 Indice dei contenuti Perch...

Voidgate

VOIDGATE Descrizione: Una tecnica che può essere utilizzata per bypassare gli scanner di memoria AV/EDR. Può essere usata per nascondere shellcode noti e rilevati come msfvenom eseguendo decrittazione al volo di singole istruzioni assembly crittografate, rendendo così inutili gli scanner di memor...

TestCitrixException

Test Citrix Exception test della mitigazione CVE-2025-6759 La documentazione Citrix su CVE-2025-6759 contiene una mitigazione alternativa che consiste nel disabilitare il gestore delle eccezioni Citrix dal registro di sistema. Tuttavia, quella documentazione non risponde alla domanda: Questa...

CVE-2019-25733

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...

CVE-2019-25733

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...

EUVD-2019-20169

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...

PT-2026-46203

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...

Nsasoft NetShareWatcher 安全漏洞

Nsasoft NetShareWatcher is a security auditing tool developed by the US company Nsasoft. Version 1.5.8.0 of Nsasoft NetShareWatcher contains a security vulnerability. This vulnerability stems from a buffer overflow in the structured exception handler, which could allow local attackers to execute...

EUVD-2018-21953

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...

CVE-2018-25432

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...

CVE-2018-25427

Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain field. Attackers can craft malicious input exceeding 658 bytes with shellcode to overwrite the structured exception...

CVE-2018-25432

Arm Whois 3.11 is affected by a local buffer overflow that allows code execution via exception handler hijacking. An input file crafted with a 672-byte offset can overwrite nSEH and SEH pointers, enabling arbitrary code execution when the structured exception handler is triggered. CVSS data prese...

CVE-2018-25432 Arm Whois 3.11 Buffer Overflow via ASLR Bypass

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...

CVE-2018-25432 Arm Whois 3.11 Buffer Overflow via ASLR Bypass

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...

CVE-2018-25427 Arm Whois 3.11 Buffer Overflow via SEH Overwrite

Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain field. Attackers can craft malicious input exceeding 658 bytes with shellcode to overwrite the structured exception...

PT-2026-45623

Name of the Vulnerable Software and Affected Versions Arm Whois version 3.11 Description A buffer overflow allows local attackers to execute arbitrary code by overwriting the structured exception handler. By crafting a malicious input file with a 672-byte offset, an attacker can overwrite the nSE...

PT-2026-45618

Name of the Vulnerable Software and Affected Versions Arm Whois version 3.11 Description A stack-based buffer overflow occurs when the application processes oversized input in the IP address or domain fields. Remote attackers can provide input exceeding 658 bytes containing shellcode to overwrite...

CVE-2018-25360

AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious ping.txt file with shellcode and jump instructio...