CVE-2014-0195

This PoC exploits a heap overflow vulnerability in OpenSSL (CVE-2014-0195) by sending maliciously crafted DTLS handshake fragments to trigger a denial-of-service (DoS) condition. The exploit constructs two oversized handshake fragments and sends them via UDP to the target.

This Python script exploits CVE-2014-0195 by leveraging WordPress's XML-RPC `system.multicall` method to perform brute-force login attempts. It batches multiple login requests into a single HTTP request to bypass rate-limiting and checks for successful authentication.

This Metasploit module exploits a buffer overflow in OpenSSL's DTLS implementation (CVE-2014-0195) by sending maliciously crafted fragmented DTLS ClientHello messages, causing a denial of service (DoS). The exploit constructs fragments with mismatched lengths to trigger the overflow.