110 matches found
CVE-2023-39063
CVE-2023-39063 Questo repository contiene un exploit per la vulnerabilità CVE-2023-39063 trovata nel software RaidenFTPD v2.4.4005. L'exploit è stato creato per funzionare con Python 3. Dettagli dell'exploit Codice Python 3 per sfruttare una vulnerabilità di buffer overflow basata su SEH in...
CVE-2019-18655
CVE-2019-18656 modulo metasploit. Buffer overflow basato su SEH nell'app di condivisione file v.1.5.0. Riepilogo CVE: File Sharing Wizard versione 1.5.0 è affetto da una vulnerabilità di buffer overflow basata su Structured Exception Handler. Un utente malintenzionato non autenticato è in grado d...
CVE-2017-8869
CVE-2017-8869 - MediaCoder 0.8.48.5888 - Lokaler Pufferüberlauf SEH Exploit neu geschrieben mit Reverse-Shell-Option...
CVE-2019-16724
Descrizione della vulnerabilità File Sharing Wizard 1.5.0 consente a un attaccante remoto di ottenere l'esecuzione di codice arbitrario sfruttando un overflow del buffer basato su Structured Exception Handler SEH in un parametro HTTP POST. Questo exploit è stato testato su Windows 7 Home...
CVE-2025-34096
🐞 CVE-2025-34096: Easy File Sharing Web Server 7.2 – Stack-basierter Pufferüberlauf SEH SEH-basierter Pufferüberlauf im Easy File Sharing Web Server 7.2, erreichbar über den Endpunkt zur Passwortwiederherstellung. 📑 Inhaltsverzeichnis Warum dieses Repository existiert Warum diese Schwachstelle...
CVE-2018-18912
🐞 CVE-2018-18912: Easy File Sharing Web Server 7.2 - Estouro de Buffer Baseado em Pilha SEH Estouro de buffer baseado em SEH no Easy File Sharing Web Server 7.2 demonstrando como um parâmetro autenticado de HTTP POST pode corromper a cadeia do manipulador de exceção. 📑 Índice Por que este...
CVE-2019-25679 RealTerm Serial Terminal 2.0.0.70 Buffer Overflow SEH
RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling SEH buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a buffer overflow payload with a POP POP RET gadget chain a...
EUVD-2019-20039
River Past CamDo 3.7.6 contains a structured exception handler SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the Lameenc.dll name field. Attackers can craft a payload with a 280-byte buffer, NSEH jump instruction, and SE...
CVE-2018-25219
PassFab Excel Password Recovery 8.3.1 contains a structured exception handling (SEH) buffer overflow vulnerability in the registration flow. A crafted payload entered into the Licensed E-mail and Registration Code field can trigger a buffer overflow (including a pop-pop-ret gadget) that enables l...
Metasploit Wrap-Up
Windows Local Privilege Escalation for standard users In this week’s release, we have an exciting new module that has been added by our very own Grant Willcox which exploits CVE-2022-26904, and allows for normal users to execute code as NT AUTHORITY/SYSTEM on Windows machines from Windows 7 up to...
Trojan-Proxy.Win32.Delf.ai Buffer Overflow
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/1dd6eb39a388f4c8a3eaf248d86aaabc.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Proxy.Win32.Delf.ai Vulnerability: Remote SEH Buffer Overflow Description: The malware listen...
Win32 Backdoor 2019-02-ARTRADOWNLOADER SEH Buffer Overflow
Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/8d42c01180be7588a2a68ad96dd0cf85.txt Contact: [email protected] Media: twitter.com/malvuln Threat: WIN32 BACKDOOR - 2019-02-ARTRADOWNLOADER Vulnerabilities: Remote SEH Buffer Overflow and Insecure...
CloudMe 1.11.2 SEH Buffer Overflow Exploit
import socket import sys target = "127.0.0.1" Written by : lutzenfried Clement Cruchet Exploiting CloudMe 1.11.2 Publisher : CloudMe AB Windows x64 10.0.18362 Build 18362 Buffer Overflow using SEH overwritten technic POP POP RET Exploit for CVE-2018-6892 Technical information used for exploit...
CVE-2019-16724
File Sharing Wizard 1.5.0 is affected by a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST parameter, enabling remote code execution. Impact is described as remote arbitrary code execution with high severity, via network access without authentication. Several references i...
Easy File Sharing Web Server 7.2 - 'New User' Local Overflow (SEH)
!/usr/bin/python Exploit Title: Easy File Sharing Web Server 7.2 local SEH overflow Date: 9/23/2019 Exploit Author: x00pwn Vendor Homepage: http://www.sharing-file.com/ Software Link: http://www.sharing-file.com/efssetup.exe Version: 7.2 Tested on: Windows 7 Exploit summary: When adding a new use...
docPrint Pro 8.0 SEH Buffer Overflow
import struct Title: docPrint Pro v8.0 'User/Master Password' Local SEH Alphanumeric Encoded Buffer Overflow Date: September 14th, 2019 Author: Connor McGarr @33y0re https://connormcgarr.github.io Vendor Homepage: http://www.verypdf.com Software Link: http://dl.verypdf.net/docprintprosetup.exe...
ChaosPro 3.1 - SEH Buffer Overflow
ChaosPro 3.1 - SEH Buffer Overflow !C:\Python27\python.exe Title : ChaosPro 3.1 Twitter : @securitychops Blog Post : https://securitychops.com/2019/08/24/retro-exploit-series-episode-one-chaospro-3-1.html our egg! payload = "T00WT00W" adjust the stack from 00F2FFA6 to 00F2FFA8 payload +=...
ChaosPro 2.0 - SEH Buffer Overflow
!C:\Python27\python.exe Title : ChaosPro 2.0 Twitter : @securitychops Blog Post : https://securitychops.com/2019/08/24/retro-exploit-series-episode-one-chaospro-3-1.html this needs to be a backwards jump to give us room to call stack jump code jmpback80 = "\x40\x75\x80\x75" jmpforward06 =...
ChaosPro 2.0 - SEH Buffer Overflow
ChaosPro 2.0 - SEH Buffer Overflow !C:\Python27\python.exe Title : ChaosPro 2.0 Twitter : @securitychops Blog Post : https://securitychops.com/2019/08/24/retro-exploit-series-episode-one-chaospro-3-1.html this needs to be a backwards jump to give us room to call stack jump code jmpback80 =...
ChaosPro 3.1 - SEH Buffer Overflow Exploit
!C:\Python27\python.exe Title : ChaosPro 3.1 Twitter : @securitychops Blog Post : https://securitychops.com/2019/08/24/retro-exploit-series-episode-one-chaospro-3-1.html our egg! payload = "T00WT00W" adjust the stack from 00F2FFA6 to 00F2FFA8 payload += "\x83\xC4\x02" the payload payload +=...