victor875/cve-2025-5548Develops a proof-of-concept exploit for CVE-2025-5548, a stack-based buffer overflow enabling remote code execution, with detailed technical analysis and Python scripts.
This is the main repository where I document my progress in the analysis of CVE 2025-5548. In this space I record each phase of the process: from lab preparation to final exploit development.
Below is the organization of the directories and files of this project:
.
├── 📂 Entorno # Manual de instalación paso a paso
│ └── 📄 Manual de instalacion.md # Guía de instalación y configuración de las herramientas
├── 📂 Explotacion # Desarrollo del exploit
│ └── 📄 explotacion.md # Guía de explotación del CVE
├── 📂 Imagenes # Capturas concretas
├── 📂 Scripts # Código fuente de explotación (.py)
└── 📄 README.md # Descripción general del proyecto
└── 📄 LICENSE # Licencia de uso
In this section I detail the technical nature of the vulnerability I am researching:
CVE 2025-5548 is a critical stack-based buffer overflow vulnerability that affects network services that process user input without proper length validation.
The problem originates in the server's command handling function, where:
Exploitation of this vulnerability allows remote code execution (RCE). This means I can take full control of the affected system remotely, executing commands with the same privileges as the vulnerable service.
The objective of this work is to carry out a controlled proof of concept (PoC). I use an isolated environment to understand how the memory overflow occurs and how I can take control of the program's execution flow.
/Scripts folder have been obtained and adapted from the original research by TheMalwareGuardian (CVE-2025-5548).