738 matches found
TestCitrixException
Test Citrix Exception prueba de la mitigación de CVE-2025-6759 La documentación de Citrix sobre CVE-2025-6759 contiene una mitigación alternativa que consiste en deshabilitar el manejador de excepciones de Citrix desde el registro. Sin embargo, esa documentación no responde a la pregunta: ¿Este...
EATGuard
EATGuard Implementación de una mitigación de protección de la tabla de direcciones de exportación, como Export Address Filtering EAF Cómo funciona Este proyecto se compone de tres binarios que, una vez compilados, se pueden encontrar en EATGuard\bin. Son: 1. EATGuardApplication.exe - Aplicación...
CVE-2018-18912
🐞 CVE-2018-18912:Easy File Sharing Web Server 7.2 - 基于栈的缓冲区溢出(SEH) Easy File Sharing Web Server 7.2 中的基于 SEH 的缓冲区溢出,演示经过身份验证的 HTTP POST 参数如何破坏异常处理程序链。 📑 目录 为什么这个仓库存在 为什么这个漏洞有趣 背景和受影响的软件 关于漏洞 触发崩溃 漏洞利用 🎓 为什么这个仓库存在 这个仓库是我在讲授内存损坏漏洞利用时使用的教学材料的一部分(除了日常工作外,我还在不同的网络安全课程中授课,帮助培养下一代逆向工程师)。 CVE-2018-18912...
Voidgate
VOIDGATE Descripción: Una técnica que se puede utilizar para evadir los escáneres de memoria de AV/EDR. Puede usarse para ocultar shellcodes conocidos y detectados como msfvenom realizando descifrado sobre la marcha de instrucciones individuales de ensamblador cifradas, haciendo así que los...
VehApiResolve
VehApiResolve Inspirado por la ofuscación de API de 32 bits del cargador Dridex. ¿Cómo funciona esto? Configuramos un manejador de excepciones. root@kitploit: AddVectoredExceptionHandler CALLFIRST, ApiResolverHandler ; Este manejador de excepciones solo manejará las excepciones lanzadas como...
CVE-2019-25733
NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...
EUVD-2019-20169
NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...
CVE-2019-25733
NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...
PT-2026-46203
NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...
Nsasoft NetShareWatcher 安全漏洞
Nsasoft NetShareWatcher is a security auditing tool developed by the US company Nsasoft. Version 1.5.8.0 of Nsasoft NetShareWatcher contains a security vulnerability. This vulnerability stems from a buffer overflow in the structured exception handler, which could allow local attackers to execute...
EUVD-2018-21953
Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...
CVE-2018-25432
Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...
CVE-2018-25427
Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain field. Attackers can craft malicious input exceeding 658 bytes with shellcode to overwrite the structured exception...
CVE-2018-25432
Arm Whois 3.11 is affected by a local buffer overflow that allows code execution via exception handler hijacking. An input file crafted with a 672-byte offset can overwrite nSEH and SEH pointers, enabling arbitrary code execution when the structured exception handler is triggered. CVSS data prese...
CVE-2018-25432 Arm Whois 3.11 Buffer Overflow via ASLR Bypass
Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...
CVE-2018-25432 Arm Whois 3.11 Buffer Overflow via ASLR Bypass
Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through...
CVE-2018-25427 Arm Whois 3.11 Buffer Overflow via SEH Overwrite
Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain field. Attackers can craft malicious input exceeding 658 bytes with shellcode to overwrite the structured exception...
PT-2026-45623
Name of the Vulnerable Software and Affected Versions Arm Whois version 3.11 Description A buffer overflow allows local attackers to execute arbitrary code by overwriting the structured exception handler. By crafting a malicious input file with a 672-byte offset, an attacker can overwrite the nSE...
PT-2026-45618
Name of the Vulnerable Software and Affected Versions Arm Whois version 3.11 Description A stack-based buffer overflow occurs when the application processes oversized input in the IP address or domain fields. Remote attackers can provide input exceeding 658 bytes containing shellcode to overwrite...
CVE-2018-25360
AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious ping.txt file with shellcode and jump instructio...