CVE-2025-34107

This Metasploit module exploits a buffer overflow in WinaXe 7.7 FTP client by sending a maliciously crafted Server Ready response. The exploit triggers when the client connects, overwriting the return address to execute arbitrary payloads.

This Metasploit module exploits a buffer overflow in WinaXe 7.7 FTP client by sending a maliciously crafted Server Ready response (220) with a payload containing a NOP sled and shellcode. The exploit targets a universal Windows offset and return address to achieve remote code execution.