CVE-2025-5548

Взлом FreeFloat FTP: анализ и эксплуатация CVE-2025-5548 Андерсон Стивен — Магистр кибербезопасности, Модуль 6 Уязвимости Индивидуальная работа: Методология анализа уязвимостей и эксплуатации Зачем этот репозиторий Я не хотел просто сдать "вот работающий эксплойт". Этот репозиторий отражает то, к...

CVE-2025-5548

💣 Разработка эксплойта — переполнение буфера Этот репозиторий документирует полный процесс эксплуатации уязвимости типа переполнение буфера , следуя структурированной методологии от начального анализа до контроля потока выполнения. 🎯 Цель Цель этого этапа — разработать функциональный эксплойт,...

CVE-2025-5548

🧪 FreeFloat FTP Server Buffer Overflow Lab CVE-2025-5548 📌 Description Ce laboratoire démontre comment exploiter une vulnérabilité de Stack Buffer Overflow dans FreeFloat FTP Server , identifiée comme CVE-2025-5548. L'objectif est de comprendre le processus complet d'exploitation dans les...

CVE-2025-5548

🛡️ Analyse et Exploitation : CVE-2025-5548 Master en Cybersécurité | Module 6 : Vulnérabilités 👋 Salut ! Bienvenue dans mon Atelier d'Analyse Dans ce dépôt, je documente mon immersion pratique dans l'analyse des vulnérabilités au niveau binaire et le développement d'exploits pour les environnement...

CVE-2018-20343

CVE-2018-20343 Ceci est une PoC pour CVE-2018-20343, une vulnérabilité dans le Build Engine de Ken Silverman. Le fichier .map généré déclenche un débordement de tampon et écrase la pile comme illustré ci-dessous : Open Watcom sous DosBox 0.74-2 : l'analyste contrôle la pile Sous FreeDos 1.2 :...

CVE-2017-14980

CVE-2017-14980 Sync Breeze Enterprise 10.0.28 - Исследование переполнения буфера Цель Изучение классической уязвимости переполнения буфера на стеке в контролируемой лабораторной среде в образовательных целях. Цель проекта заключалась в том, чтобы лучше понять: Фаззинг приложения Анализ сбоев...

CVE-2025-5548

Laboratoire d'Exploitation - CVE-2025-5548 FreeFloat FTP Dépôt de laboratoire orienté vers l'exploitation contrôlée du CVE-2025-5548 sur FreeFloat FTP Server, sous environnement Windows et dans une VM isolée. Le projet est divisé en deux blocs : Environment/ : préparation de l'environnement outil...

Backdoor.Win32.WinShell.30 Remote Stack Buffer Overflow / Missing Authentication

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/56a2b135c8d35561ea5b04694155eb77.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.WinShell.30 Vulnerability: Remote Stack Buffer Overflow / Missing Authentication...

Email-Worm.Win32.Zhelatin.ago Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/0418e7f95a8b94c035e10749234f8378.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Zhelatin.ago Vulnerability: Remote Stack Buffer Overflow Description: Buffer overflo...

CVE-2019-18931

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer EIP control via crafted GET/POST parameters...

CVE-2019-18931

CVE-2019-18931 affects Western Digital My Cloud EX2 Ultra firmware up to 2.31.195. The issue is a buffer overflow that enables control of the Extended Instruction Pointer (EIP) via crafted GET/POST parameters. Affected firmware version is stated, but no remediation or patch version is provided in...

CVE-2019-18931: Buffer Copy without Checking Size of Input

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer EIP control via crafted GET/POST parameters...

CVE-2018-18695: Improper Restriction of Operations within the Bounds of a Memory Buffer

M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer EIP control via a crafted MRD file...

ActivePDF Toolkit Code Execution

ActivePDF Toolkit 8.1.0 multiple RCE Introduction ============ The ActivePDF Toolkit is a Windows library which enhances business processes to stamp, stitch, merge, form-fill, add digital signatures, barcodes to PDF. Both .NET and native APIs are provided. Amongst many other operations, this...

Freefloat FTP Server 1.0 - 'SITE ZONE' Command Buffer Overflow

Vulnerability background An ftp server seems to be very small,the feeling should be not many people use this to open the ftp service, but there is a vulnerability, and zoomeye be able to search to a lot of equipment to use the service,and the analysis very simple. Vulnerability details Treatment...

uSQLite 1.0.0 Denial Of Service

!/usr/bin/python Exploit Title: Remote buffer overflow vulnerability in uSQLite 1.0.0 PoC Date: 27/10/1016 Exploit Author: Peter Baris Software Link: https://sourceforge.net/projects/usqlite/?source=directory Version: 1.0.0 Tested on: windows 7 and XP SP3 Longer strings will cause heap based...

Internet Bug Bounty: gdImageTrueColorToPaletteBody allows arbitrary write/read access

Upstream bug report ================ 2016-06-29 04:03 UTC https://bugs.php.net/bug.php?id=72512 Patch ===== 2016-07-19 07:47 UTC http://git.php.net/?p=php-src.git;a=commit;h=928aecc002e906b309b28f0062f03d4e5eda3e45 Fixed for PHP 5.5 security only mode, PHP 5.6, PHP 7.0...

Internet Bug Bounty: EIP control using type confusion in json encoding

https://bugs.python.org/issue24683 File 'eip.py' posted on the issue page proves EIP control...

PHP yaml_parse_url Double Free Vulnerability

The yaml parsing functions suffers from an exploitable double free caused by the error path for the phpvarunserialize call on line 797 of pecl/fileformats/yaml.git/parse.c. Title: PHP yamlparseurl Double Free Credit: John Leitch email protected Url1:...

LanSpy 2.0.0.155 - Buffer Overflow (PoC)

LanSpy 2.0.0.155 - Buffer Overflow PoC ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-LANSPY-BUFFER-OVERFLOW-10052015.txt Vendor: ================================ www.lantricks.com Product: ================================...