CVE-2025-5548

CVE-2025-5548 Recherche en sécurité et analyse technique de CVE-2025-5548, une vulnérabilité de débordement de tampon affectant FreeFloat FTP Server 1.0. Ce dépôt documente le comportement de la vulnérabilité, l'analyse de la surface d'attaque, les tests de preuve de concept contrôlés et les...

CVE-2025-5548

Exploração e Análise de Vulnerabilidades Propósito do documento: Refletir sobre os conhecimentos adquiridos durante a implantação do laboratório, detalhar o processo de exploração do CVE-2025-5548 e propor os próximos passos rumo à investigação de vulnerabilidades desconhecidas 0-days. 1. Minha...

CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 익스플로잇 전문적인 취약점 분석 및 완전한 원격 버퍼 오버플로우 익스플로잇 🎯 프로젝트 하이라이트 완전한 실제 사례 연구 : CVE-2025-5548 NOOP 명령을 통한 FreeFloat FTP Server 1.0의 원격 스택 기반 버퍼 오버플로우 수동 도구 설치 + 자동화 스크립트 Windows & Linux Windows 11 VM에서의 완전히 문서화된 실습 환경 단계별 익스플로잇 : 퍼징 → 오프셋 → 배드 캐릭터 → JMP ESP → 작동하는...

CVE-2025-5548-POC

CVE-2025-5548-POC Descrizione della vulnerabilità CVE-2025-5548 è una vulnerabilità di tipo stack buffer overflow identificata in FreeFloat FTP Server, un servizio FTP legacy per sistemi Windows. Il difetto risiede nel gestore del comando NOOP, che non esegue la validazione della dimensione...

CVE-2025-5548

Analisi e sfruttamento di FreeFloat FTP: CVE-2025-5548 Anderson Steven — Master in Cybersicurezza, Modulo 6 Vulnerabilità Consegna individuale: Metodologia di analisi e sfruttamento delle vulnerabilità Perché questo repository Non volevo semplicemente consegnare "ecco l'exploit funzionante". Ques...

RockyLinux 9 : dovecot (RLSA-2026:19364)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19364 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...

RLSA-2026:19364 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

RHEL 10 : dovecot (RHSA-2026:19149)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19149 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...

ALSA-2026:19149 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

ALSA-2026:19364 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

RHEL 8 : dovecot (RHSA-2026:18053)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:18053 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...