Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-8760. PoCs published by born0monday.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-8760, a stack-based buffer overflow vulnerability in INSTAR 2K+/4K cameras (version <= 3.10.0). The exploit leverages ROP chains to achieve remote code execution (RCE) by overflowing a buffer and manipulating the stack to execute arbitrary commands.
Description
A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 Build 1124. This affects the function base64_decode of the component fcgi_server. The manipulation of the argument Authorization leads to buffer overflow. It is possible to initiate the attack remotely.
Exploits (1)
This repository contains a functional exploit for CVE-2025-8760, a stack-based buffer overflow vulnerability in INSTAR 2K+/4K cameras (version <= 3.10.0). The exploit leverages ROP chains to achieve remote code execution (RCE) by overflowing a buffer and manipulating the stack to execute arbitrary commands.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H