PT-2026-34461 · Lizardsystems · Lanspy

Published 2026-04-22 · Updated 2026-04-22 · CVE-2018-25265

NVD

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode, triggering code execution through SEH chain manipulation and controlled jumps.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-25265

Affected Products

Lanspy

References · 4

• 🔥 https://exploit-db.com/exploits/46018 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-25265 · Security Note
• https://vulncheck.com/advisories/lanspy-local-buffer-overflow · Note
• https://lizardsystems.com · Note