CVE-2025-70330

🧩 CVE-2025-70330: Easy Grade Pro 4.1 ファイル解析の脆弱性 リバースエンジニアリングによる脆弱性調査が最初の一歩から可能であることを初心者に示すために作られた教育用の例です。 📑 目次 このリポジトリが存在する理由 「最初のCVEに至る道」との関連 学習に古いソフトウェアが最適な理由 この例が重要な理由 脆弱性について 技術的分析 📂 特定の不正なファイルだけがアプリケーションをクラッシュさせる理由 概念実証（PoC） クラッシュの挙動 備考 🎓 このリポジトリが存在する理由...

CVE-2025-70330

Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds memory read during parsing. This results in an unhandled...

EUVD-2025-208565

Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds memory read during parsing. This results in an unhandled...

CVE-2025-70330

Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds memory read during parsing. This results in an unhandled...

CVE-2025-70330

Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds memory read during parsing. This results in an unhandled...

CVE-2025-70330

Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds memory read during parsing. This results in an unhandled...

CVE-2025-70330

Easy Grade Pro 4.1.0.2 is affected by a file parsing logic flaw in proprietary .EGP gradebook files. By modifying specific fields at precise offsets within a valid .EGP, an attacker can trigger an out-of-bounds memory read during parsing, causing an unhandled access violation and a local denial-o...

📄 Easy Grade Pro 4.1 Malformed .EGP File Denial of Service

This Python script generates a malformed .EGP gradebook file designed to trigger a crash in Easy Grade Pro 4.1 by corrupting data at a specific offset within the file...

Orbis Easy Grade Pro 安全漏洞

Orbis Easy Grade Pro is a teaching performance management software developed by Orbis Company in Singapore. Version 4.1.0.2 of Easy Grade Pro contains a security vulnerability. This vulnerability stems from a logical flaw in the file parsing process when handling proprietary .EGP gradebook files...

CVE-2025-70330

Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds memory read during parsing. This results in an unhandled...