Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
cves-2025-11187_15467_69418 — OpenSSL pocs: PKCS#12 stack overflow, CMS IV overflow, OCB infoleak [partial chain] | Kitploit
Tools/GitHubGitHub/x-stp/cves-2025-11187_15467_69418
Vulnerability AnalysisExploitationCryptographyPapers & ResearchLearning & EducationBinary Exploitation
GitHubx-stp/cves-2025-11187_15467_69418

cves-2025-11187_15467_69418

OpenSSL pocs: PKCS#12 stack overflow, CMS IV overflow, OCB infoleak [partial chain]

View Repository
45 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Not my discovery. Never got around to a proper chain, though it's ~80% smashable; bf_canary needs a real target.

~ glhf

CVEs

CVETypeSeverityDescription
CVE-2025-11187Stack OverflowHighPKCS#12 PBMAC1 keyLength validation bypass
CVE-2025-15467Stack OverflowHighCMS AuthEnvelopedData IV length overflow
CVE-2025-69418Info LeakMediumOCB mode partial block encryption failure

Build

root@kitploit:~
make all OPENSSL_PATH=/path/to/vulnerable/openssl

Full chain

full-chain/ chains CVE-2025-69418 (ASLR bypass) + CVE-2025-15467 (RCE) against a forking service.

Research/education only. Don't run this against anything you don't own.

Download Tool