128 matches found
CVE-2017-8869
CVE-2017-8869 - MediaCoder 0.8.48.5888 - Локальное переполнение буфера SEH Эксплойт переписан с опцией обратной оболочки...
CVE-2025-34096
🐞 CVE-2025-34096: Easy File Sharing Web Server 7.2 - Переполнение буфера на основе стека SEH Переполнение буфера на основе SEH в Easy File Sharing Web Server 7.2, доступное через конечную точку восстановления пароля. 📑 Содержание Зачем существует этот репозиторий Почему эта уязвимость интересна...
CVE-2019-16724
Описание уязвимости File Sharing Wizard 1.5.0 позволяет удалённому злоумышленнику получить выполнение произвольного кода путём эксплуатации переполнения буфера на основе Structured Exception Handler SEH в параметре HTTP POST. Этот эксплойт был протестирован на windows 7 Home. На других платформах...
CVE-2023-39063
CVE-2023-39063 Этот репозиторий содержит эксплойт для уязвимости CVE-2023-39063, обнаруженной в программном обеспечении RaidenFTPD v2.4.4005. Эксплойт создан для работы с Python 3. Детали эксплойта Код Python 3 для эксплуатации уязвимости переполнения буфера на основе SEH в RaidenFTPD v.2.4.4005...
CVE-2018-18912
🐞 CVE-2018-18912: Easy File Sharing Web Server 7.2 - Стековое переполнение буфера SEH SEH-переполнение буфера в Easy File Sharing Web Server 7.2, демонстрирующее, как аутентифицированный параметр HTTP POST может повредить цепочку обработчиков исключений. 📑 Содержание Зачем существует этот...
CVE-2019-18655
CVE-2019-18655 модуль metasploit. Переполнение буфера на основе SEH в приложении File Sharing Wizard v.1.5.0. CVE краткое описание: Версия 1.5.0 File Sharing Wizard подвержена уязвимости переполнения буфера на основе структурированного обработчика исключений SEH. Неаутентифицированный злоумышленн...
CVE-2018-25283: Buffer Copy without Checking Size of Input
iSmartViewPro 1.5 contains a structured exception handling SEH buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to...
CVE-2019-25679 RealTerm Serial Terminal 2.0.0.70 Buffer Overflow SEH
RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling SEH buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a buffer overflow payload with a POP POP RET gadget chain a...
CVE-2019-25679: Out-of-bounds Write
RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling SEH buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a buffer overflow payload with a POP POP RET gadget chain a...
EUVD-2019-20039
River Past CamDo 3.7.6 contains a structured exception handler SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the Lameenc.dll name field. Attackers can craft a payload with a 280-byte buffer, NSEH jump instruction, and SE...
CVE-2018-25219
PassFab Excel Password Recovery 8.3.1 contains a structured exception handling (SEH) buffer overflow vulnerability in the registration flow. A crafted payload entered into the Licensed E-mail and Registration Code field can trigger a buffer overflow (including a pop-pop-ret gadget) that enables l...
CVE-2018-25218: Out-of-bounds Write
PassFab RAR Password Recovery 9.3.2 contains a structured exception handler SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a payload with a buffer overflow, NSEH jump, and shellcode, then paste it into...
CVE-2019-25650: Out-of-bounds Write
River Past CamDo 3.7.6 contains a structured exception handler SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the Lameenc.dll name field. Attackers can craft a payload with a 280-byte buffer, NSEH jump instruction, and SE...
CVE-2019-25615: Out-of-bounds Write
Lavavo CD Ripper 4.20 contains a structured exception handling SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Activation Name field. Attackers can craft a payload with controlled buffer data, NSEH jump...
CVE-2019-25603: Out-of-bounds Write
TuneClone 2.20 contains a structured exception handler SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license code string. Attackers can craft a payload with a controlled buffer, NSEH jump instruction, and SEH handler address...
CVE-2023-43504: Buffer Copy without Checking Size of Input
A vulnerability has been identified in COMOS All versions V10.4.4. Ptmcast executable used for testing cache validation service in affected application is vulnerable to Structured Exception Handler SEH based buffer overflow. This could allow an attacker to execute arbitrary code on the target...
Metasploit Wrap-Up
Windows Local Privilege Escalation for standard users In this week’s release, we have an exciting new module that has been added by our very own Grant Willcox which exploits CVE-2022-26904, and allows for normal users to execute code as NT AUTHORITY/SYSTEM on Windows machines from Windows 7 up to...
Trojan-Proxy.Win32.Delf.ai Buffer Overflow
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/1dd6eb39a388f4c8a3eaf248d86aaabc.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Proxy.Win32.Delf.ai Vulnerability: Remote SEH Buffer Overflow Description: The malware listen...
Backdoor.Win32.Ketch.a Remote Stack Buffer Overflow
Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/1149c42fd8cf3ca7d00ef55a6337befe.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Ketch.a Vulnerability: Remote SEH Stack Buffer Overflow Description: Ketch makes HTTP...
Win32 Backdoor 2019-02-ARTRADOWNLOADER SEH Buffer Overflow
Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/8d42c01180be7588a2a68ad96dd0cf85.txt Contact: [email protected] Media: twitter.com/malvuln Threat: WIN32 BACKDOOR - 2019-02-ARTRADOWNLOADER Vulnerabilities: Remote SEH Buffer Overflow and Insecure...