CVE-2025-5548

⚡ CVE-2025-5548: 脆弱性研究とエクスプロイト このリポジトリは、CVE-2025-5548 の技術的分析と概念実証（PoC）のウォークスルーを提供します。この研究は、初期のバイナリ検査からエクスプロイトの成功に至るまで、脆弱性のライフサイクル全体を網羅しています。 ⚠️ 法的・倫理的免責事項 このリポジトリは教育目的のみ です。すべての研究は、管理された隔離されたラボ環境で実施されました。明示的な許可なくシステムに対してこれらの技術を不正に使用することは、違法かつ非倫理的です。 🔍 脆弱性の概要 CVE-2025-5548 は、FreeFloat FTP Server...

CVE-2017-14980_syncbreeze_10.0.28_bof

エクスプロイト - CVE-2017-14980 - Sync Breeze Enterprise v10.0.28 このリポジトリは、CVE-2017-14980 として識別される脆弱性を対象とした、Sync Breeze Enterprise バージョン 10.0.28 向けの概念実証 バッファオーバーフローエクスプロイト BOF を含んでいます。 説明 この脆弱性は、/login エンドポイントへの POST リクエスト内の password フィールドを処理する際の不適切な入力検証に起因します。 攻撃者はこのフィールドに過度に長い値を送信することで、EIP...

CVE-2017-14980

🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - スタックベースのバッファオーバーフロー Sync Breeze Enterprise 10.0.28 の /login ハンドラを通じて到達可能なスタックベースのバッファオーバーフロー。入力長のチェック漏れがスタックメモリを破壊する様子を示しています。 📑 目次 このリポジトリが存在する理由 この脆弱性が興味深い理由 背景と影響を受けるソフトウェア 脆弱性について クラッシュのトリガー エクスプロイト方法 🎓 このリポジトリが存在する理由...

CVE-2025-5548-Exploit-Development

CVE-2025-5548 - 익스플로잇 개발 연구실 이 저장소는 취약점 분석 및 익스플로잇 개발을 위한 작업 환경을 구축하고, 이를 실제 버퍼 오버플로우 사례 연구에 적용하는 과정을 문서화합니다. 이 프로젝트는 FreeFloat FTP Server 1.0을 중심으로 구축되었으며, 통제된 환경에서 취약점을 식별, 분석 및 익스플로잇하는 방법을 이해하기 위한 교육용 대상으로 사용됩니다. 단순히 익스플로잇을 재현하는 데 초점을 맞추기보다는, 환경 준비, 취약점 트리거, 크래시 분석, 실행 흐름 제어, 코드 실행 달성에 이르는 전체...

Win32-Exploit-Dev-Labs-Vulnserver

Win32 Exploit Dev Series: Vol. 1 Vulnserver This repository...

programming-for-penetration-testing-buffer-overflow-exploit

Buffer Overflow Exploit in Ruby Overview This project was...

CVE-2016-20050 NetSchedScan 1.0 Buffer Overflow Denial of Service

NetSchedScan 1.0 contains a buffer overflow vulnerability in the scan Hostname/IP field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a crafted payload containing 388 bytes of data followed by 4 bytes of EIP overwrite into the...

EUVD-2019-20014

X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-byte buffer overflow. Attackers can inject shellcode into memory and use an egg hunter technique to locate and execute the payload...

CVE-2019-25332

FTP Commander Pro 8.03 contains a local stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting the EIP register through a custom command input. Attackers can craft a malicious payload of 4108 bytes to overwrite memory and execute shellcode, demonstrating remot...

Malware-Analysis-Project-SLMAIL-5.5-BOF-

Malware Analysis Project Introduction to exploit development w...

Stack-Buffer-Overflow-x86

Stack-Based Buffer Overflow: From Bug to Code Execution I...

CVE-2010-5333

The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow already existed for the vulnerable software. This CVE is t...

CVE-2024-47613

A flaw was found in the gdk-pixbuf decoder in the GStreamer library. Processing a specially crafted input file can cause a NULL pointer dereference due to an unchecked return value, resulting in an application crash and a denial of service. Mitigation Do not process untrusted files with the...

CVE-2024-47613

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in gstgdkpixbufdecflush within gstgdkpixbufdec.c. This function invokes memcpy, using outpix as the destination address. outpix is expected to point to the fra...

CVE-2024-47607 GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header

GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...

CVE-2024-47607

CVE-2024-47607 affects GStreamer’s opus decoder (gst_opus_dec_parse_header in gstopusdec.c). A stack-allocated pos buffer of size 64 can overflow when n_channels > 64, causing writes beyond the buffer and potential control-flow corruption (overwriting the EIP). The issue is fixed in GStreamer ...

CVE-2024-47538

CVE-2024-47538 affects GStreamer’s vorbis handling in the Vorbis decoder. A stack-buffer overflow is triggered in the function vorbis_handle_identification_packet within gstvorbisdec.c: a stack-allocated position buffer of size 64 is overflowed when vd->vi.channels exceeds 64, writing the valu...

CVE-2024-45166

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...

CVE-2024-45166

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...

Email-Worm.Win32.Agent.gi Remote Stack Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/74e65773735f977185f6a09f1472ea46.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Agent.gi Vulnerability: Remote Stack Buffer Overflow - UDP Datagram Description:...