199 matches found
CVE-2018-6537.RCE
CVE-2018-6537 L'exploit cible Sync Breeze exécuté sur Windows 10 x86, build: 16299 , affectant la version 10.4.18 , où un attaquant non authentifié peut effectuer un débordement SEH via une connexion TCP, entraînant une exécution de code à distance. Cet exploit suppose que toutes les atténuations...
CVE-2017-9544
CVE-2017-9544 Easy Chat Server의 SEH 기반 버퍼 오버플로우 익스플로잇 CVE-2017-9544 기반: pwntools msfvenom / reversetcp payload ropper x64dbg 취약한 앱: https://www.exploit-db.com/exploits/42155 설정 피해자 IP를 192.168.15.100으로 설정하고 Easy Chat Server를 시작합니다. 공격자 IP를 192.168.15.101로 설정하고 python main.py를 실행합니다. 리버스 쉘을 기다립니다...
CVE-2010-5301
CVE-2010-5301 SEH 오버플로우와 임의 DLL 주입의 개념 증명 설명 Kolibrì HTTP Server 2.0은 스택 기반 버퍼 오버플로우 의 영향을 받습니다. 발견 당시 이 취약점은 스택에 배치된 셸코드를 가리키는 ESP에 JMP ESP 명령어로 명령 포인터를 덮어씌우는 방식으로 악용되었습니다. 이후 더 큰 페이로드를 보내면 SEH 체인을 덮어쓸 수 있다는 것이 발견되었습니다. 그러나 애플리케이션에는 SE 핸들러가 다음 SEH 레코드를 가리키도록 하는 유효한 POP - POP - RET 명령어가 없습니다. 이는 ...
ALLMediaServer-1.6-Buffer-Overflow
CVE-2022-28381 ALLMediaServer 1.6 Remoto - Buffer Overflow SEH ALLMediaServer-1.6-Buffer-OverflowMetasploit Prova ed Exploit Riferimenti https://nvd.nist.gov/vuln/detail/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381...
CVE-2019-25741
Mobatek MobaXterm 12.1 is affected by a SEH-based buffer overflow in the username field of session files. An attacker can craft a malicious sessions file that overflows the username, triggering code execution when imported, potentially enabling a reverse shell with the user’s privileges. The CVE ...
CVE-2019-25733 NetShareWatcher 1.5.8.0 SEH Buffer Overflow
NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...
CVE-2019-25733 NetShareWatcher 1.5.8.0 SEH Buffer Overflow
NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to...
CVE-2019-25670
River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the Lameenc.dll field. Attackers can craft a payload with 280 bytes of padding, a next structured exception...
CVE-2018-25217
PDF Explorer 1.5.66.2 contains a structured exception handler SEH overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attackers can craft a payload with buffer overflow, NSEH jump, and ROP gadget chains that execute when the...
CVE-2019-25650
Affected software: River Past CamDo 3.7.6. Vulnerability: SEH buffer overflow in Lame_enc.dll name field enables local code execution. The exploit payload uses a ~280-byte buffer, an NSEH jump, and an SEH handler address to trigger code execution via a pop-pop-ret gadget, potentially establishing...
CVE-2018-25218
CVE-2018-25218 affects PassFab RAR Password Recovery 9.3.2. The issue is a Structured Exception Handler (SEH) buffer overflow that allows local arbitrary code execution via a crafted payload entered into the registration field (Licensed E-mail and Registration Code). The attack is local with no u...
CVE-2018-25217 PDF Explorer 1.5.66.2 Structured Exception Handler Local Code Execution
PDF Explorer 1.5.66.2 contains a structured exception handler SEH overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malicious data. Attackers can craft a payload with buffer overflow, NSEH jump, and ROP gadget chains that execute when the...
CVE-2019-25628 Download Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflow
Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting malicious URLs. Attackers can create specially crafted URLs with overflowing buffer data that overwrites SEH pointers and...
CVE-2019-25615
Lavavo CD Ripper 4.20 contains a structured exception handling SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Activation Name field. Attackers can craft a payload with controlled buffer data, NSEH jump...
CVE-2019-25615 Lavavo CD Ripper 4.20 Local SEH Buffer Overflow
Lavavo CD Ripper 4.20 contains a structured exception handling SEH buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Activation Name field. Attackers can craft a payload with controlled buffer data, NSEH jump...
CVE-2019-25609
JetAudio jetCast Server 2.0 is affected by a stack-based buffer overflow in the Log Directory configuration field. The vulnerability allows local attackers to overwrite structured exception handling (SEH) pointers, enabling injection of alphanumeric encoded shellcode to trigger an SEH handler and...
CVE-2019-25466 Easy File Sharing Web Server 7.2 Local SEH Overflow
Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by creating a malicious username. Attackers can craft a username with a payload containing 4059 bytes of padding followed by a nseh...
CVE-2019-25319
Domain Quester Pro 6.02 is affected by a stack overflow affecting the Structured Exception Handler (SEH). The vulnerability can be triggered by crafting a malicious payload in the Domain Name Keywords input field, leading to an access violation and remote code execution, including a bind shell on...
CVE-2020-37177
CVE-2020-37177 describes a denial-of-service issue in BOOTP Turbo 2.0 where a crafted payload can overwrite the Structured Exception Handler (SEH), causing the application to crash and corrupt the SEH chain. The vulnerability is associated with a 2196-byte payload using specific byte patterns, en...
