CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 Follina POC 在 localhost 上托管 exploit.html，端口 80。打开该 docx 即可弹出 calc。 若要修改 doc 指向的远程地址，请用 7Z 打开并编辑 word\rels\document.xml.rels，使其指向新位置。你必须保留感叹号。如果你从 URL 末尾漏掉它，它真的不会运行。 该利用程序在 window.location.href 之前必须包含至少 3541 个字符，并且这些字符必须位于 script 标签内。exploit.html 中已包含约 6000 个字符。...

EUVD-2019-19979

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite t...

CVE-2020-37176 Torrent 3GP Converter 1.51 - Stack Overflow (SEH)

Torrent 3GP Converter 1.51 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler SEH registers. Attackers can craft a malicious payload targeting the application's registration dialog to trigger code execution and open...

Exploit for Out-of-bounds Write in Microsoft

CVE-2018-0802POC usage: cv...

Total Video Player 1.3.1 (Settings.ini) - SEH Buffer Overflow

No description provided by source. !/usr/bin/perl Exploit Title: Total Video Player 1.3.1 Settings.ini - SEH Buffer Overflow Date: 11-24-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Total Video Player 1.3.1 http://www.effectmatrix.com/total-video-player/ Software...

VLC <= 0.8.6e Subtitle Parsing Local Buffer Overflow Exploit

No description provided by source. / VLC =0.8.6.e Subtitle parsing local buffer overflow exploit Creadit to [email protected] vs Look2Me @ Tested on windows XP Pro SP2 / include stdio.h include stdlib.h include string.h char ssaheader= "Script Info\r\n" "Title: VLC = 0.8.6c,e buffer-overflow\r\n"...