CVE-2025-5548

CVE-2025-5548 Investigación de seguridad y análisis técnico de CVE-2025-5548, una vulnerabilidad de desbordamiento de búfer que afecta a FreeFloat FTP Server 1.0. Este repositorio documenta el comportamiento de la vulnerabilidad, el análisis de la superficie de ataque, las pruebas controladas de...

CVE-2025-5548

🚀 CVE-2025-5548 - Explotación de FreeFloat FTP Server 1.0 Análisis profesional de vulnerabilidades y explotación completa de desbordamiento de búfer remoto 🎯 Aspectos Destacados del Proyecto Caso de estudio completo del mundo real de CVE-2025-5548 desbordamiento de búfer remoto basado en pila en...

CVE-2025-5548-POC

CVE-2025-5548-POC Descripcion de la vulnerabilidad CVE-2025-5548 es una vulnerabilidad de tipo stack buffer overflow identificada en FreeFloat FTP Server, un servicio FTP legado para sistemas Windows. El fallo reside en el manejador del comando NOOP, el cual no realiza validacion del tamano de la...

CVE-2025-5548

Explotación y Análisis de Vulnerabilidades Propósito del documento: Reflexionar sobre los conocimientos adquiridos durante el despliegue del laboratorio, detallar el proceso de explotación del CVE-2025-5548 y plantear los siguientes pasos hacia la investigación de vulnerabilidades desconocidas...

CVE-2025-5548

攻破 FreeFloat FTP：CVE-2025-5548 的分析与利用 Anderson Steven —— 网络安全硕士，模块 6（漏洞） 个人提交： 漏洞分析与利用方法论 为什么创建这个仓库 我不想只是提交一份“这是可用的 exploit”。这个仓库 记录的是我面对内存破坏漏洞时的工作方式：先看什么、按什么顺序 排除假设、每个阶段使用哪些工具以及为什么。我用 CVE-2025-5548 作为主线，因为它是一个小而易于把握的案例，但这个仓库的核心文档—— METHODOLOGY.md ——不是“如何利用 FreeFloat FTP”的教程，而是我面对任何二进制文件时的推理方式，...

RockyLinux 9 : dovecot (RLSA-2026:19364)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19364 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...

RLSA-2026:19364 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

ALSA-2026:19149 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

RHEL 10 : dovecot (RHSA-2026:19149)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19149 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...

ALSA-2026:19364 Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

Important: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

RHEL 8 : dovecot (RHSA-2026:18053)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:18053 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...

dovecot: denial of service via specially crafted NOOP command

A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...