46 matches found
CVE-2018-20343
CVE-2018-20343 This is a PoC for CVE-2018-20343, a vulnerability in Ken Silverman's Build Engine. The generated .map file triggers a buffer overflow and overwrites the stack as shown below: Open Watcom under DosBox 0.74-2: the analyst controls the stack Under FreeDos 1.2: the analyst controls EIP...
CVE-2017-14980
CVE-2017-14980 Sync Breeze Enterprise 10.0.28 - Buffer Overflow Research Objective Study of a classic stack-based buffer overflow vulnerability in a controlled lab environment for educational purposes. The objective of this project was to better understand: Application fuzzing Crash analysis EIP...
CVE-2025-5548
💣 Exploit Development - Buffer Overflow This repository documents the full process of exploiting a Buffer Overflow vulnerability, following a structured methodology from initial analysis to execution flow control. 🎯 Objective The goal of this phase is to develop a functional exploit that allows...
CVE-2025-5548
🧪 FreeFloat FTP Server Buffer Overflow Lab CVE-2025-5548 📌 Description This lab demonstrates how to exploit a Stack Buffer Overflow vulnerability in FreeFloat FTP Server , identified as CVE-2025-5548. The objective is to understand the complete exploitation process on vulnerable Windows...
CVE-2025-5548
🛡️ Analysis and Exploitation: CVE-2025-5548 Master in Cybersecurity | Module 6: Vulnerabilities 👋 Hello! Welcome to my Analysis Workshop In this repository I document my practical immersion in binary-level vulnerability analysis and the development of exploits for Windows environments. The main...
CVE-2025-5548
Exploitation Lab - CVE-2025-5548 FreeFloat FTP Repository for a controlled exploitation lab of CVE-2025-5548 on FreeFloat FTP Server, running on Windows inside an isolated VM. The project is divided into two blocks: Environment/: environment setup tools, IDEs, debugger, disassembler, and vulnerab...
CVE-2025-5548
Breaking FreeFloat FTP: analysis and exploitation of CVE-2025-5548 Anderson Steven — Master in Cybersecurity, Module 6 Vulnerabilities Individual assignment: Methodology for vulnerability analysis and exploitation Why this repository I did not want to simply hand in "here is the exploit working"...
Backdoor.Win32.WinShell.30 Remote Stack Buffer Overflow / Missing Authentication
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/56a2b135c8d35561ea5b04694155eb77.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.WinShell.30 Vulnerability: Remote Stack Buffer Overflow / Missing Authentication...
Email-Worm.Win32.Zhelatin.ago Remote Stack Buffer Overflow
Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/0418e7f95a8b94c035e10749234f8378.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Email-Worm.Win32.Zhelatin.ago Vulnerability: Remote Stack Buffer Overflow Description: Buffer overflo...
CVE-2019-18931
Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer EIP control via crafted GET/POST parameters...
CVE-2019-18931
CVE-2019-18931 affects Western Digital My Cloud EX2 Ultra firmware up to 2.31.195. The issue is a buffer overflow that enables control of the Extended Instruction Pointer (EIP) via crafted GET/POST parameters. Affected firmware version is stated, but no remediation or patch version is provided in...
PT-2019-15723
Name of the Vulnerable Software and Affected Versions Western Digital My Cloud EX2 Ultra firmware version 2.31.195 Description The issue allows for a Buffer Overflow with Extended Instruction Pointer EIP control. This can be achieved via crafted GET/POST parameters. Recommendations For Western...
CVE-2019-18931: Buffer Copy without Checking Size of Input
Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer EIP control via crafted GET/POST parameters...
CVE-2018-18695: Improper Restriction of Operations within the Bounds of a Memory Buffer
M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer EIP control via a crafted MRD file...
PT-2018-14576
Name of the Vulnerable Software and Affected Versions M2SOFT Report Designer Viewer version 5.0 Description The issue allows for a Buffer Overflow with Extended Instruction Pointer EIP control. This can be achieved via a crafted MRD file. Recommendations For version 5.0, at the moment, there is n...
ActivePDF Toolkit Code Execution
ActivePDF Toolkit 8.1.0 multiple RCE Introduction ============ The ActivePDF Toolkit is a Windows library which enhances business processes to stamp, stitch, merge, form-fill, add digital signatures, barcodes to PDF. Both .NET and native APIs are provided. Amongst many other operations, this...
Freefloat FTP Server 1.0 - 'SITE ZONE' Command Buffer Overflow
Vulnerability background An ftp server seems to be very small,the feeling should be not many people use this to open the ftp service, but there is a vulnerability, and zoomeye be able to search to a lot of equipment to use the service,and the analysis very simple. Vulnerability details Treatment...
uSQLite 1.0.0 Denial Of Service
!/usr/bin/python Exploit Title: Remote buffer overflow vulnerability in uSQLite 1.0.0 PoC Date: 27/10/1016 Exploit Author: Peter Baris Software Link: https://sourceforge.net/projects/usqlite/?source=directory Version: 1.0.0 Tested on: windows 7 and XP SP3 Longer strings will cause heap based...
Internet Bug Bounty: gdImageTrueColorToPaletteBody allows arbitrary write/read access
Upstream bug report ================ 2016-06-29 04:03 UTC https://bugs.php.net/bug.php?id=72512 Patch ===== 2016-07-19 07:47 UTC http://git.php.net/?p=php-src.git;a=commit;h=928aecc002e906b309b28f0062f03d4e5eda3e45 Fixed for PHP 5.5 security only mode, PHP 5.6, PHP 7.0...