Chris Au

4 exploits Active since Mar 2026
CVE-2019-25626 EXPLOITDB HIGH python WORKING POC
River Past Cam Do 3.7.6 Local Buffer Overflow in Activation Code
River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows local attackers to execute arbitrary code by supplying a malicious activation code string. Attackers can craft a buffer containing 608 bytes of junk data followed by shellcode and SEH chain overwrite values to trigger code execution when the activation dialog processes the input.
CVSS 8.4
CVE-2019-25627 EXPLOITDB HIGH python WORKING POC
FlexHEX 2.71 Local Buffer Overflow via SEH Unicode
FlexHEX 2.71 contains a local buffer overflow vulnerability in the Stream Name field that allows local attackers to execute arbitrary code by triggering a structured exception handler (SEH) overflow. Attackers can craft a malicious text file with carefully aligned shellcode and SEH chain pointers, paste the contents into the Stream Name dialog, and execute arbitrary commands like calc.exe when the exception handler is triggered.
CVSS 8.4
EIP-2026-116769 EXPLOITDB python WORKING POC
AllPlayer 7.4 - SEH Buffer Overflow (Unicode)
EIP-2026-116770 EXPLOITDB python WORKING POC
AllPlayer 7.4 - SEH Buffer Overflow (Unicode)