{
	"id": "d678446c-4d83-4cde-b287-b5c9412dcfd7",
	"created_at": "2026-04-06T00:10:28.929479Z",
	"updated_at": "2026-04-10T13:12:15.628927Z",
	"deleted_at": null,
	"sha1_hash": "75629cc71586efa865a237d597fc3ff1d439794a",
	"title": "Listplanting – yet another code injection trick",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 31096,
	"plain_text": "Listplanting – yet another code injection trick\r\nBy by adam\r\nPublished: 2019-04-25 · Archived: 2026-04-05 17:08:02 UTC\r\nOkay, this is the last one in this short series, just to add the list-view control.\r\nSame as tree-view, it accepts two interesting messages LVM_INSERTGROUPSORTED and\r\nLVM_SORTGROUPS that can help us to set up a callback pointing to LVGroupCompare function.\r\nAnd same as tree-view, it’s fairly popular. Testing my quick\u0026dirty POC I crashed a number of programs including\r\nTotal Commander, and Windows Explorer.\r\nModexp shared a nice POC here.\r\nCsaba shared a nice POC here.\r\nSource: https://www.hexacorn.com/blog/2019/04/25/listplanting-yet-another-code-injection-trick/\r\nhttps://www.hexacorn.com/blog/2019/04/25/listplanting-yet-another-code-injection-trick/\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://www.hexacorn.com/blog/2019/04/25/listplanting-yet-another-code-injection-trick/"
	],
	"report_names": [
		"listplanting-yet-another-code-injection-trick"
	],
	"threat_actors": [],
	"ts_created_at": 1775434228,
	"ts_updated_at": 1775826735,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/75629cc71586efa865a237d597fc3ff1d439794a.pdf",
		"text": "https://archive.orkl.eu/75629cc71586efa865a237d597fc3ff1d439794a.txt",
		"img": "https://archive.orkl.eu/75629cc71586efa865a237d597fc3ff1d439794a.jpg"
	}
}