CVE-2025-5548

⚡ CVE-2025-5548: 취약점 연구 및 익스플로잇 이 저장소는 CVE-2025-5548 에 대한 기술적 분석과 개념 증명PoC 워크스루를 제공합니다. 이 연구는 초기 바이너리 검사부터 성공적인 익스플로잇까지 취약점의 전체 수명 주기를 다룹니다. ⚠️ 법적 및 윤리적 고지 이 저장소는교육 목적으로만 제공됩니다. 모든 연구는 통제되고 격리된 실험실 환경에서 수행되었습니다. 명시적 허가 없이 시스템에 이러한 기술을 무단 사용하는 것은 불법이며 비윤리적입니다. 🔍 취약점 개요 CVE-2025-5548 은 FreeFloat FTP...

CVE-2017-14980_syncbreeze_10.0.28_bof

익스플로잇 - CVE-2017-14980 - Sync Breeze Enterprise v10.0.28 이 저장소는 CVE-2017-14980 으로 식별된 취약점을 대상으로 Sync Breeze Enterprise 버전 10.0.28에 대한 개념 증명 버퍼 오버플로우 익스플로잇BOF을 포함합니다. 설명 이 취약점은 /login 엔드포인트에 대한 POST 요청에서 password 필드를 처리할 때 부적절한 입력 검증으로 인해 존재합니다. 공격자는 이 필드에 지나치게 긴 값을 보내 EIP 를 덮어쓰고 임의 코드 실행을 가능하게 할 ...

CVE-2017-14980

🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - 스택 기반 버퍼 오버플로우 /login 핸들러를 통해 접근 가능한 Sync Breeze Enterprise 10.0.28의 스택 기반 버퍼 오버플로우입니다. 입력 길이 검사가 없을 경우 스택 메모리가 어떻게 손상될 수 있는지 보여줍니다. 📑 목차 이 저장소가 존재하는 이유 이 취약점이 흥미로운 이유 컨텍스트 및 영향을 받는 소프트웨어 취약점 정보 크래시 유발 익스플로잇 🎓 이 저장소가 존재하는 이유 이 저장소는 제가 메모리 손상 익스플로...

CVE-2025-5548-Exploit-Development

CVE-2025-5548 - Exploit Development Lab This repository documents the process of setting up a working environment for vulnerability analysis and exploit development, and applying it to a practical buffer overflow case study. The project is built around FreeFloat FTP Server 1.0, used as an...

Win32-Exploit-Dev-Labs-Vulnserver

Win32 Exploit Dev Series: Vol. 1 Vulnserver This repository...

programming-for-penetration-testing-buffer-overflow-exploit

Buffer Overflow Exploit in Ruby Overview This project was...

CVE-2016-20050 NetSchedScan 1.0 Buffer Overflow Denial of Service

NetSchedScan 1.0 contains a buffer overflow vulnerability in the scan Hostname/IP field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a crafted payload containing 388 bytes of data followed by 4 bytes of EIP overwrite into the...

EUVD-2019-20014

X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-byte buffer overflow. Attackers can inject shellcode into memory and use an egg hunter technique to locate and execute the payload...

CVE-2019-25332

FTP Commander Pro 8.03 contains a local stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting the EIP register through a custom command input. Attackers can craft a malicious payload of 4108 bytes to overwrite memory and execute shellcode, demonstrating remot...

CVE-2020-37159: Stack-based Buffer Overflow

Parallaxis Cuckoo Clock 5.0 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory registers in the alarm scheduling feature. Attackers can craft a malicious payload exceeding 260 bytes to overwrite EIP and EBP, enabling shellcode execution...

Malware-Analysis-Project-SLMAIL-5.5-BOF-

Malware Analysis Project Introduction to exploit development w...

Stack-Buffer-Overflow-x86

Stack-Based Buffer Overflow: From Bug to Code Execution I...

CVE-2010-5333

The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow already existed for the vulnerable software. This CVE is t...

CVE-2024-47613

A flaw was found in the gdk-pixbuf decoder in the GStreamer library. Processing a specially crafted input file can cause a NULL pointer dereference due to an unchecked return value, resulting in an application crash and a denial of service. Mitigation Do not process untrusted files with the...

CVE-2024-47613

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in gstgdkpixbufdecflush within gstgdkpixbufdec.c. This function invokes memcpy, using outpix as the destination address. outpix is expected to point to the fra...

CVE-2024-47538: Stack-based Buffer Overflow

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

CVE-2024-47607 GHSL-2024-116: Stack-buffer overflow in gst_opus_dec_parse_header

GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gstopusdecparseheader function within gstopusdec.c'. The pos array is a stack-allocated buffer of size 64. If nchannels exceeds 64, the for loop will write beyond the...

CVE-2024-47607

CVE-2024-47607 affects GStreamer’s opus decoder (gst_opus_dec_parse_header in gstopusdec.c). A stack-allocated pos buffer of size 64 can overflow when n_channels > 64, causing writes beyond the buffer and potential control-flow corruption (overwriting the EIP). The issue is fixed in GStreamer ...

CVE-2024-47538

CVE-2024-47538 affects GStreamer’s vorbis handling in the Vorbis decoder. A stack-buffer overflow is triggered in the function vorbis_handle_identification_packet within gstvorbisdec.c: a stack-allocated position buffer of size 64 is overflowed when vd->vi.channels exceeds 64, writing the valu...

CVE-2024-45166

An issue was discovered in UCI IDOL 2 aka uciIDOL or IDOL2 through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service DoS attacks and possibly remote code execution...