CVE-2020-28926 PoC — ReadyMedia 安全漏洞

Source

https://github.com/lorsanta/exploit-CVE-2020-28926

Associated Vulnerability

Title: ReadyMedia 安全漏洞 (CVE-2020-28926)
Description:ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.

Readme

# exploit-CVE-2020-28926
## Reference
https://www.rootshellsecurity.net/remote-heap-corruption-bug-discovery-minidlna/
## Build
Copy the folder containing minidlna-1.2.1 source and run build_and_run.sh

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →