EIP-2026-115106

This exploit targets a format string vulnerability in Crob FTP Server 2.50.5 Build 238, allowing arbitrary memory writes and remote code execution via a crafted USER command. The shellcode establishes a reverse shell on port 21 by overwriting the accept() function pointer.