CVE-2025-55763 PoC — CivetWeb 安全漏洞

Description

Heap overflow PoC for CivetWeb CVE-2025-55763

介绍

## CVE-2025-55763
Buffer Overflow in the URI parser of CivetWeb 1.14-1.16 (latest as of yet).

## Vulnerable code
The crash occurs on [line 15599 of src/civetweb.c](https://github.com/civetweb/civetweb/blob/master/src/civetweb.c#L15599).

## Fix
See the [pull request](https://github.com/civetweb/civetweb/pull/1347).

## PoC
The PoC crashes the server performing an heap overflow, however it is possible to achieve remote code execution by crafting an exploit for this vulnerability.

`cat http_request_crash_input.txt | nc 127.0.0.1 8080`

文件快照

备注