PT-2025-29138 · Unknown · Easy File Sharing Ftp Server

Bl4Ck H4Ck3R · Published 2025-07-10 · Updated 2025-07-11 · CVE-2025-34096

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Easy File Sharing HTTP Server version 7.2

Description: A stack-based buffer overflow vulnerability exists in the application. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long Email parameter. The application fails to properly validate the length of this field, resulting in a memory corruption condition. An unauthenticated remote attacker can exploit this to execute arbitrary code with the privileges of the server process.

Recommendations: Easy File Sharing HTTP Server version 7.2: As a temporary workaround, consider disabling the /sendemail.ghp endpoint until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2025-14625

CVE-2025-34096

Affected Products

Easy File Sharing Ftp Server

References · 9

• 🔥 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/easyfilesharing_post.rb · Exploit
• 🔥 https://exploit-db.com/exploits/42186 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-34096 · Security Note
• https://bdu.fstec.ru/vul/2025-14625 · Security Note
• https://vulncheck/advisories/easy-file-sharing-http-server-buffer-overflow · Note
• https://twitter.com/VulmonFeeds/status/1943456347904741626 · Twitter Post
• https://twitter.com/CVEnew/status/1943668201872859336 · Twitter Post
• https://t.me/cvenotify/128436 · Telegram Post
• https://twitter.com/CveFindCom/status/1943395222618067423 · Twitter Post