CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 Exploitation Professional vulnerability analysis & full remote buffer overflow exploitation 🎯 Project Highlights Complete real-world case study of CVE-2025-5548 remote stack-based buffer overflow in FreeFloat FTP Server 1.0 via NOOP command Manual tool...

CVE-2025-5548-POC

CVE-2025-5548-POC Vulnerability Description CVE-2025-5548 is a stack buffer overflow vulnerability identified in FreeFloat FTP Server, a legacy FTP service for Windows systems. The flaw resides in the NOOP command handler, which does not validate input size before copying it into a fixed-size...

CVE-2025-5548

Exploitation and Vulnerability Analysis Document purpose: Reflect on the knowledge acquired during the lab deployment, detail the exploitation process for CVE-2025-5548, and outline the next steps toward unknown vulnerability 0-day research. 1. My Vision on Vulnerability Research Throughout this...

CVE-2025-5548

Breaking FreeFloat FTP: analysis and exploitation of CVE-2025-5548 Anderson Steven — Master in Cybersecurity, Module 6 Vulnerabilities Individual assignment: Methodology for vulnerability analysis and exploitation Why this repository I did not want to simply hand in "here is the exploit working"...

CVE-2025-5548-FreeFloat-FTP-Lab

Lab scripts This folder gathers the reproducible artifacts associated with the CVE-2025-5548 / FreeFloat FTP Server 1.0 lab. The teaching sequence and naming follow the reference teaching material from TheMalwareGuardian, while these versions have been rebuilt for this repository from the...

CVE-2025-5548

CVE-2025-5548 Security research and technical analysis of CVE-2025-5548, a buffer overflow vulnerability affecting FreeFloat FTP Server 1.0. This repository documents vulnerability behaviour, attack surface analysis, controlled proof of concept testing, and defensive observations within a safe la...

FreeFloat FTP Server 1.0 NOOP Buffer Overflow

FreeFloat FTP Server version 1.0 contains a buffer overflow in the NOOP command handler. This proof of concept documents fuzzing, EIP control, bad character identification, and JMP ESP validation. https://packetstorm.news/download/237891...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Freefloat Freefloat_Ftp_Server

CVE-2025-5548: FreeFloat FTP Server 1.0 - Stack-Based Buffer O...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Freefloat Freefloat_Ftp_Server

🔍 Análisis de la vulnerabilidad CVE-2025-5548 en FreeFloat FTP...

FreeFloat FTP Server 1.0 NOOP Command Buffer Overflow

FreeFloat FTP Server version 1.0 contains a buffer overflow in its NOOP command handler. The supplied proof of concept documents analysis, fuzzing, offset discovery, and return-address control. https://packetstorm.news/download/236480...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix NULL pointer dereference in class dump When a TAPRIO child qdisc is deleted via RTMDELQDISC, tapriograft is called with new == NULL and stores NULL into q-qdiscscl - 1. Subsequent RTMGETTCLASS dump operatio...

Astra Linux – vulnerability in dovecot

Sending a “NOOP ...” command with 4000 opening and closing parentheses results in approximately 1 MB of additional memory usage. Longer commands will cause the client to disconnect. This 1 MB can be retained for extended periods by not ending the command with an LF character. Thus, an attacker...

CentOS Linux 6 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (CENTOS6:CLSA-2026:1778250399)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1778250399 advisory. - Sending NOOP ... command with 4000 parenthesis open+close results in 1MB extra memory usage. Longer commands will result in client disconnectio...

CentOS Linux 8 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (CENTOS-STREAM8:CLSA-2026:1777977059)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1777977059 advisory. - Sending NOOP ... command with 4000 parenthesis open+close results in 1MB extra memory usage. Longer commands will result in client...

Rocky Linux 9 [CIQ] Security Update: dovecot / dovecot-debuginfo / dovecot-debugsource / dovecot-devel / etc Multiple Vulnerabilities (crlsa-2026_19364)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619364 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...

Rocky Linux 9 [CIQ] Security Update: dovecot / dovecot-debuginfo / dovecot-debugsource / dovecot-devel / etc Multiple Vulnerabilities (crlsa-2026_13857)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613857 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...

Rocky Linux 10.2 [CIQ] Security Update: dovecot / dovecot-debuginfo / dovecot-debugsource / dovecot-devel / etc Multiple Vulnerabilities (crlsa-2026_19149)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619149 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...

Rocky Linux 8 [CIQ] Security Update: dovecot / dovecot-debuginfo / dovecot-debugsource / dovecot-devel / etc Multiple Vulnerabilities (crlsa-2026_13830)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613830 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...

CentOS Linux 8.5 [TuxCare] Security Update: dovecot / dovecot-devel / dovecot-mysql / dovecot-pgsql / etc (CENTOS8.5:CLSA-2026:1777978787)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1777978787 advisory. - Sending NOOP ... command with 4000 parenthesis open+close results in 1MB extra memory usage. Longer commands will result in client...

Rocky Linux 10.1 [CIQ] Security Update: dovecot / dovecot-debuginfo / dovecot-debugsource / dovecot-devel / etc Multiple Vulnerabilities (crlsa-2026_13498)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613498 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...