Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-39063: GitHub - AndreGNogueira/CVE-2023-39063: POC of the CVE-2023-39063

Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wizard.

CVE
#vulnerability#git#buffer_overflow#auth

CVE-2023-39063

This repository contains an exploit for the vulnerability CVE-2023-39063 found in the RaidenFTPD v2.4.4005 software. The exploit has been created to work with Python 3.

Exploit Details

Python 3 code to exploit a SEH based Buffer Overflow vulnerability in RaidenFTPD v.2.4.4005. This vulnerability allows a local attacker to execute arbitrary code via the Server name field of the step by step setup wizard.

Exploit Usage

  1. Open RaidenFTPD
  2. Click on Setup -> Step by step setup wizard
  3. Run python code: python3 exploit-cve-2023-39063.py
  4. Paste the content of exploit-raiden.txt into the field Server name
  5. Click next -> next -> ok
  6. Pop calc.exe

Exploit DemonstrationSEH.Exploit.RaidenFTPD.mp4Disclaimer

This exploit script is provided for educational purposes only. The authors do not promote or endorse any unauthorized use or exploitation of vulnerabilities. The responsibility for any illegal or unethical use of this script lies solely with the user.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907