Design/Logic Flaw

File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution and obtain a command shell by sending a HTTP GET request including the malicious payload in the...

CVE-2019-18655

File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution and obtain a command shell by sending a HTTP GET request including the malicious payload in the...

CVE-2019-18655

CVE-2019-18655 affects File Sharing Wizard 1.5.0 (build 2008) and is an SEH-based buffer overflow that enables remote code execution via crafted HTTP requests (GET/DELETE reported in sources). Public exploit/ PoC evidence exists (e.g., Metasploit module file_sharing_wizard_seh.rb). No remediation...

Win32k Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete dat...

PT-2019-15557 · Upredsun · File Sharing Wizard

File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution and obtain a command shell by sending a HTTP GET request including the malicious payload in the...

CVE-2019-18655: Out-of-bounds Write

File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution and obtain a command shell by sending a HTTP GET request including the malicious payload in the...

kernel: use-after-free information leak in SMB2_read

An issue was discovered in the Linux kernel's implementation of the CIFS protocol. The SMB2read function has a possible use-after-free when CIFS function tracing is enabled. While data is used after being freed, it is has not been determined how it could be used for privilege escalation...

CVE-2019-17415

A Structured Exception Handler SEH based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary code via the HTTP DELETE method, a similar issue to CVE-2019-16724 and CVE-2010-2331...

Stack overflow

A Structured Exception Handler SEH based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary code via the HTTP DELETE method, a similar issue to CVE-2019-16724 and CVE-2010-2331...

CVE-2019-17415

A Structured Exception Handler SEH based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary code via the HTTP DELETE method, a similar issue to CVE-2019-16724 and CVE-2010-2331...

CVE-2019-17415

CVE-2019-17415 is a real vulnerability in File Sharing Wizard 1.5.0 (built 2008-08-26) caused by a Structured Exception Handler (SEH) based buffer overflow. It allows remote, unauthenticated attackers to execute arbitrary code via the HTTP DELETE method. The connected documents corroborate a fami...

PT-2019-15141 · Upredsun · File Sharing Wizard

🚨 CVE-2019-18655 File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution and obtain a command shell by sending a HTTP GET request including the malicious...

CVE-2019-17415: Buffer Copy without Checking Size of Input

A Structured Exception Handler SEH based buffer overflow in File Sharing Wizard 1.5.0 26-8-2008 allows remote unauthenticated attackers to execute arbitrary code via the HTTP DELETE method, a similar issue to CVE-2019-16724 and CVE-2010-2331...

File Sharing Wizard 1.5.0 POST SEH Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'File Sharing Wizard - POST SEH Overflow', 'Description' = %q This module exploits an unauthenticated HTTP POST SEH-based buffer overflow in File...

File Sharing Wizard 1.5.0 DELETE SEH Buffer Overflow

import socket from struct import Exploit Title: File sharing wizard 'DELETE' remote SEH overflow Date: 10/4/2019 Exploit Author: Striker Vendor Homepage: https://file-sharing-wizard.soft112.com/ Version: 1.5.0 Build on 26-8-2008 Tested on: Windows 7 File-sharing-wizard-seh host = "10.0.2.7" port ...

File Sharing Wizard 1.5.0 - POST SEH Overflow Exploit

import socket from struct import Exploit Title: File sharing wizard 'post' remote SEH overflow Date: 9/23/2019 Exploit Author: x00pwn Software Link: https://file-sharing-wizard.soft112.com/ Version: 1.5.0 Tested on: Windows 7 CVE : CVE-2019-16724 File-sharing-wizard-seh...

File Sharing Wizard Buffer Overflow Vulnerability

File Sharing Wizard is a set of file sharing transfer software. A buffer overflow vulnerability exists in the HTTP POST parameter in File Sharing Wizard version 1.5.0, which can be exploited by remote attackers to execute arbitrary code...

CVE-2019-16724

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331...

CVE-2019-16724

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331...

Design/Logic Flaw

File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter, a similar issue to CVE-2010-2330 and CVE-2010-2331...