CVE-2019-25631

Affected product: AIDA64 Business 5.99.4900. Vulnerability: Structured exception handling (SEH) buffer overflow that allows local code execution by overwriting SEH pointers with shellcode. Trigger vectors include injecting egg hunter shellcode via the SMTP display name field in preferences or the...

CVE-2019-25631 AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter

AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH pointers with malicious shellcode. Attackers can inject egg hunter shellcode through the SMTP display name field in preferences...

CVE-2019-25631 AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter

AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH pointers with malicious shellcode. Attackers can inject egg hunter shellcode through the SMTP display name field in preferences...

CVE-2019-25629 AIDA64 Extreme 5.99.4900 SEH Buffer Overflow via Logging

AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execute arbitrary code by supplying a malicious CSV log file path. Attackers can inject shellcode through the Hardware Monitoring logging...

CVE-2019-25629

AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execute arbitrary code by supplying a malicious CSV log file path. Attackers can inject shellcode through the Hardware Monitoring logging...

CVE-2019-25627 FlexHEX 2.71 Local Buffer Overflow via SEH Unicode

FlexHEX 2.71 contains a local buffer overflow vulnerability in the Stream Name field that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overflow. Attackers can craft a malicious text file with carefully aligned shellcode and SEH chain pointers,...

CVE-2019-25627

FlexHEX 2.71 exposes a local buffer overflow vulnerability in the Stream Name field that can be triggered via a crafted text file to overflow the SEH chain, enabling local execution of commands (e.g., calc.exe) when the exception handler is invoked. The issue is a local vulnerability with shellco...

CVE-2019-25626 River Past Cam Do 3.7.6 Local Buffer Overflow in Activation Code

River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows local attackers to execute arbitrary code by supplying a malicious activation code string. Attackers can craft a buffer containing 608 bytes of junk data followed by shellcode and...

SUSE CVE-2026-33150

libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the iouring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When iouring thread creati...

River Past Cam Do code issue vulnerabilities

River Past Cam Do is a multimedia tool software for screen recording and video capture, developed by FlexHEX. Version 3.7.6 of River Past Cam Do contains a code vulnerability. This vulnerability stems from a local buffer overflow in the activation code input field, which could allow local attacke...

PT-2026-27368

Name of the Vulnerable Software and Affected Versions Base64 Decoder version 1.1.2 Description A stack-based buffer overflow allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overwrite. SEH is a mechanism for handling hardware and software exception...

FinalWire AIDA64 Extreme buffer error vulnerability

FinalWire AIDA64 Extreme is a diagnostic software developed by FinalWire Corporation, designed for system information detection, hardware monitoring, and performance testing. Version 5.99.4900 of FinalWire AIDA64 Extreme contains a buffer error vulnerability. This vulnerability stems from a...

PT-2026-27360

Name of the Vulnerable Software and Affected Versions River Past Cam Do version 3.7.6 Description A local buffer overflow exists in the activation code input field. A local attacker can execute arbitrary code by providing a malicious activation code string. This is achieved by crafting a buffer...

FinalWire AIDA64 Business buffer error vulnerability

FinalWire AIDA64 Business is a diagnostic software developed by FinalWire Corporation, designed for system information detection, hardware monitoring, and performance testing. Version 5.99.4900 of FinalWire AIDA64 Business contains a buffer error vulnerability. This vulnerability stems from...

CVE-2019-25627: Unrestricted Upload of File with Dangerous Type

FlexHEX 2.71 contains a local buffer overflow vulnerability in the Stream Name field that allows local attackers to execute arbitrary code by triggering a structured exception handler SEH overflow. Attackers can craft a malicious text file with carefully aligned shellcode and SEH chain pointers,...

CLSA-2026-1774269500 icu: Fix of CVE-2025-5222

CVE-2025-5222: Fix stack buffer overflow in addTag handling that allowed subtag struct overflow leading to memory corruption and local arbitrary code execution...

CLSA-2026-1774273758 icu: Fix of CVE-2025-5222

CVE-2025-5222: Fix stack buffer overflow in addTag handling that allowed subtag struct overflow leading to memory corruption and local arbitrary code execution...

EUVD-2019-19950

DVDXPlayer Pro 5.5 contains a local buffer overflow vulnerability with structured exception handling that allows local attackers to execute arbitrary code by crafting malicious playlist files. Attackers can create a specially crafted .plf file containing shellcode and NOP sleds that overflows a...

EUVD-2019-19979

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite t...

EUVD-2019-19948

TuneClone 2.20 contains a structured exception handler SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license code string. Attackers can craft a payload with a controlled buffer, NSEH jump instruction, and SEH handler address...