Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-34105 State: PUBLISHED Published: 2025-07-15T13:02:06.618Z Last Updated: 2025-11-21T19:20:38.579Z Vendors: Flexense Products: DiskBoss Enterprise Problem Types: CWE-20, CWE-787 Description: A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14. The vulnerability arises from improper bounds checking on the path component of HTTP GET requests. By sending a specially crafted long URI, a remote unauthenticated attacker can trigger a buffer overflow, potentially leading to arbitrary code execution with SYSTEM privileges on vulnerable Windows hosts. Additional Analyst Notes: - CISA ADP Vulnrichme
trary code execution with SYSTEM privileges on vulnerable Windows hosts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40869 - https://www.exploit-db.com/exploits/42395 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/diskboss_get_bof.rb - https://www.vulncheck.com/advisories/diskboss-enterprise-buffer-overflow-rce
CVE ID: CVE-2025-34106 State: PUBLISHED Published: 2025-07-15T13:05:49.222Z Last Updated: 2025-07-15T13:40:20.874Z Vendors: Burnaware Products: PDF Shaper Problem Types: CWE-119, CWE-120 Description: A buffer overflow vulnerability exists in PDF Shaper versions 3.5 and 3.6 when converting a crafted PDF file to an image using the 'Convert PDF to Image' functionality. An attacker can exploit this vulnerability by tricking a user into opening a maliciously crafted PDF file, leading to arbitrary code execution under the context of the user. This vulnerability has been verified on Windows XP, 7, 8, and 10 platforms using the PDFTools.exe component. Additional Analyst Notes: - CISA ADP Vulnrichmen
on Windows XP, 7, 8, and 10 platforms using the PDFTools.exe component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/shaper_pdf_bof.rb - https://www.exploit-db.com/exploits/37760 - https://www.pdfshaper.com/ - https://vulners.com/vulnerlab/VULNERABLE:1579 - https://www.vulncheck.com/advisories/pdf-shaper-buffer-overflow-via-convert-to-image-feature
CVE ID: CVE-2025-34107 State: PUBLISHED Published: 2025-07-15T13:11:18.747Z Last Updated: 2025-07-15T13:43:53.619Z Vendors: LabF Products: WinaXe FTP Client Problem Types: CWE-121 Description: A buffer overflow vulnerability exists in the WinaXe FTP Client version 7.7 within the FTP banner parsing functionality, WCMDPA10.dll. When the client connects to a remote FTP server and receives an overly long '220 Server Ready' response, the vulnerable component responsible for parsing the banner overflows a stack buffer, leading to arbitrary code execution under the context of the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasplo
user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/winaxe_server_ready.rb - http://hyp3rlinx.altervista.org/advisories/WINAXE-FTP-CLIENT-REMOTE-BUFFER-OVERFLOW.txt - https://www.exploit-db.com/exploits/40767 - https://www.vulncheck.com/advisories/wina-xe-ftp-client-remote-buffer-overflow
CVE ID: CVE-2025-34108 State: PUBLISHED Published: 2025-07-15T13:01:40.516Z Last Updated: 2025-07-15T13:40:16.922Z Vendors: Falconstor Software Products: Disk Pulse Enterprise Problem Types: CWE-121, CWE-20 Description: A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34. An attacker can send a specially crafted HTTP POST request to the /login endpoint with an overly long username parameter, causing a buffer overflow in the libspp.dll component. Successful exploitation allows arbitrary code execution with SYSTEM privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid
TEM privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/disk_pulse_enterprise_bof.rb - https://www.exploit-db.com/exploits/40452 - https://vulners.com/metasploit/MSF:EXPLOIT-WINDOWS-HTTP-DISK_PULSE_ENTERPRISE_BOF- - https://advisories.checkpoint.com/defense/advisories/public/2017/cpai-2017-0006.html/ - https://www.vulncheck.com/advisories/disk-pulse-enterprise-login-stack-buffer-overflow
CVE ID: CVE-2025-34109 State: PUBLISHED Published: 2025-07-15T13:04:59.958Z Last Updated: 2025-11-21T19:20:03.072Z Vendors: Panda Security Products: Panda Global Protection 2016, Panda Antivirus Pro 2016, Panda Small Business Protection, Panda Internet Security 2016 Problem Types: CWE-427 Description: PSEvents.exe in multiple Panda Security products runs hourly with SYSTEM privileges and loads DLL files from a user-writable directory without proper validation. An attacker with low-privileged access who can write DLL files to the monitored directory can achieve arbitrary code execution with SYSTEM privileges. Affected products include Panda Global Protection 2016, Panda Antivirus Pro 2016, Pa
e execution with SYSTEM privileges. Affected products include Panda Global Protection 2016, Panda Antivirus Pro 2016, Panda Small Business Protection, and Panda Internet Security 2016 (all versions up to 16.1.2). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20160704105329/http://www.pandasecurity.com/uk/support/card?id=100053 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/local/panda_psevents.rb - https://www.exploit-db.com/exploits/40020 - https://web.archive.org/web/20170415211828/http://www.security-assessment.com/files/documents/advisory/Panda%20Security%20-%20Privilege%20Escalation.pdf - htt
1828/http://www.security-assessment.com/files/documents/advisory/Panda%20Security%20-%20Privilege%20Escalation.pdf - https://www.vulncheck.com/advisories/panda-security-psevents-insecure-dll-loading-privilege-escalation
CVE ID: CVE-2025-34110 State: PUBLISHED Published: 2025-07-15T13:01:10.712Z Last Updated: 2025-07-15T13:44:56.509Z Vendors: ColoradoFTP Products: Server Problem Types: CWE-22, CWE-552, CWE-306 Description: A directory traversal vulnerability exists in ColoradoFTP Server ≤ 1.3 Build 8 for Windows, allowing unauthenticated attackers to read or write arbitrary files outside the configured FTP root directory. The flaw is due to insufficient sanitation of user-supplied file paths in the FTP GET and PUT command handlers. Exploitation is possible by submitting traversal sequences during FTP operations, enabling access to system-sensitive files. This issue affects only the Windows version of Colorad
during FTP operations, enabling access to system-sensitive files. This issue affects only the Windows version of ColoradoFTP. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/ftp/colorado_ftp_traversal.rb - https://www.exploit-db.com/exploits/40231 - https://bitbucket.org/nolife/coloradoftp/commits/16a60c4a74ef477cd8c16ca82442eaab2fbe8c86 - https://www.vulncheck.com/advisories/colorado-ftp-server-path-traversal-information-disclosure
CVE ID: CVE-2025-34111 State: PUBLISHED Published: 2025-07-15T13:09:56.350Z Last Updated: 2025-07-15T13:42:57.252Z Vendors: Tiki Software Community Association Products: Wiki CMS Groupware Problem Types: CWE-434, CWE-306, CWE-20 Description: An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component's default connector (connector.minimal.php), which allows remote attackers to upload and execute malicious PHP scripts in the context of the web server. The vulnerable component does not enforce file type validation, allowing attackers to craft a POST request to upload executable PHP payloads through the ELFinder in
le type validation, allowing attackers to craft a POST request to upload executable PHP payloads through the ELFinder interface exposed at /vendor_extra/elfinder/. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://tiki.org/article434-Security-update-Tiki-15-2-Tiki-14-4-and-Tiki-12-9-released - https://www.exploit-db.com/exploits/40091 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/tikiwiki_upload_exec.rb - https://www.vulncheck.com/advisories/tiki-wiki-el-finder-unauthenticated-file-upload-rce
CVE ID: CVE-2025-34112 State: PUBLISHED Published: 2025-07-15T13:07:31.186Z Last Updated: 2025-07-15T13:41:30.766Z Vendors: Riverbed Technology Products: SteelCentral NetExpress, SteelCentral NetProfiler Problem Types: CWE-89, CWE-78, CWE-306, CWE-266 Description: An authenticated multi-stage remote code execution vulnerability exists in Riverbed SteelCentral NetProfiler and NetExpress 10.8.7 virtual appliances. A SQL injection vulnerability in the '/api/common/1.0/login' endpoint can be exploited to create a new user account in the appliance database. This user can then trigger a command injection vulnerability in the '/index.php?page=licenses' endpoint to execute arbitrary commands. The at
igger a command injection vulnerability in the '/index.php?page=licenses' endpoint to execute arbitrary commands. The attacker may escalate privileges to root by exploiting an insecure sudoers configuration that allows the 'mazu' user to execute arbitrary commands as root via SSH key extraction and command chaining. Successful exploitation allows full remote root access to the virtual appliance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/40108 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/riverbed_netprofiler_netexpress_exec.rb - https://support.riverbed.com/content/support/software
ules/exploits/linux/http/riverbed_netprofiler_netexpress_exec.rb - https://support.riverbed.com/content/support/software/steelcentral-npm/net-profiler.html - https://www.vulncheck.com/advisories/riverbed-steel-central-net-profiler-net-express-rce
CVE ID: CVE-2025-34113 State: PUBLISHED Published: 2025-07-15T13:09:34.329Z Last Updated: 2025-07-15T13:42:26.936Z Vendors: Tiki Software Community Association Products: Wiki CMS Groupware Problem Types: CWE-306, CWE-20, CWE-78 Description: An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the `viewmode` GET parameter in `tiki-calendar.php`. When the calendar module is enabled and an authenticated user has permission to access it, an attacker can inject and execute arbitrary PHP code. Successful exploitation leads to remote code execution in the context of the web server user. Additional Analyst Notes: - CISA ADP Vuln
oitation leads to remote code execution in the context of the web server user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://tiki.org/article414-Important-Security-Fix-for-all-versions-of-Tiki - https://www.exploit-db.com/exploits/39965 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/tiki_calendar_exec.rb - https://www.acunetix.com/vulnerabilities/web/tiki-wiki-cms-remote-code-execution-via-calendar-module/ - https://www.vulncheck.com/advisories/tiki-wiki-cms-authenticated-command-injection-in-calendar-module
CVE ID: CVE-2025-34114 State: PUBLISHED Published: 2025-07-25T15:52:56.387Z Last Updated: 2025-07-28T19:05:55.332Z Vendors: Laser Romae s.r.l. Products: OpenBlow Problem Types: CWE-749, CWE-94 Description: A client-side security misconfiguration vulnerability exists in OpenBlow whistleblowing platform across multiple versions and default deployments, due to the absence of critical HTTP response headers including Content-Security-Policy, Referrer-Policy, Permissions-Policy, Cross-Origin-Embedder-Policy, and Cross-Origin-Resource-Policy. This omission weakens browser-level defenses and exposes users to cross-site scripting (XSS), clickjacking, and referer leakage. Although some instances attem
fenses and exposes users to cross-site scripting (XSS), clickjacking, and referer leakage. Although some instances attempt to enforce CSP via HTML <meta> tags, this method is ineffective, as modern browsers rely on header-based enforcement to reliably block inline scripts and untrusted resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://seclists.org/fulldisclosure/2025/Jul/13 - https://www.openblow.it - https://www.vulncheck.com/advisories/openblow-missing-critical-security-headers
CVE ID: CVE-2025-34115 State: PUBLISHED Published: 2025-07-15T13:04:01.581Z Last Updated: 2025-07-15T13:39:54.645Z Vendors: ITRS Group Products: OP5 Monitor Problem Types: CWE-78, CWE-306, CWE-20 Description: An authenticated command injection vulnerability exists in OP5 Monitor through version 7.1.9 via the 'cmd_str' parameter in the command_test.php endpoint. A user with access to the web interface can exploit the 'Test this command' feature to execute arbitrary shell commands as the unprivileged web application user. The vulnerability resides in the configuration section of the application and requires valid login credentials with access to the command testing functionality. This issue is
of the application and requires valid login credentials with access to the command testing functionality. This issue is fixed in version 7.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/op5_config_exec.rb - https://www.exploit-db.com/exploits/39676 - https://www.itrsgroup.com/products/network-monitoring-op5-monitor - https://www.vulncheck.com/advisories/op5-monitor-authenticated-command-execution
CVE ID: CVE-2025-34116 State: PUBLISHED Published: 2025-07-15T13:02:31.571Z Last Updated: 2025-11-19T14:36:49.515Z Vendors: IPFire Project Products: IPFire Problem Types: CWE-78, CWE-20, CWE-306 Description: A remote command execution vulnerability exists in IPFire before version 2.19 Core Update 101 via the 'proxy.cgi' CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in the NCSA user creation form fields, leading to command execution with web server privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ipfire.org/news/ipfire-2-19-core-update-101-released - https://raw.githubusercontent.com/rapid7/metasploi
- https://www.ipfire.org/news/ipfire-2-19-core-update-101-released - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/ipfire_proxy_exec.rb - https://www.exploit-db.com/exploits/39765 - https://www.asafety.fr/en/vuln-exploit-poc/xss-rce-ipfire-2-19-core-update-101-remote-command-execution/ - https://bugzilla.ipfire.org/show_bug.cgi?id=11087 - https://www.vulncheck.com/advisories/ipfire-authenticated-rce
CVE ID: CVE-2025-34117 State: PUBLISHED Published: 2025-07-16T21:02:57.281Z Last Updated: 2025-11-19T14:36:49.764Z Vendors: Netcore Technology, Netis Products: Router firmware Problem Types: CWE-912, CWE-306, CWE-78 Description: A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can send specially crafted UDP packets to execute arbitrary commands on the affected device. This backdoor uses a hardcoded authentication mechanism and accepts shell commands post
commands on the affected device. This backdoor uses a hardcoded authentication mechanism and accepts shell commands post-authentication. Some device models include a non-standard implementation of the `echo` command, which may affect exploitability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20140828114943/http://blog.trendmicro.com/trendlabs-security-intelligence/netis-routers-leave-wide-open-backdoor/ - https://www.seebug.org/vuldb/ssvid-90227 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/misc/netcore_udp_53413_backdoor.rb - https://www.shadowserver.org/what-we-do/network-reporting/netcore-net
xploits/linux/misc/netcore_udp_53413_backdoor.rb - https://www.shadowserver.org/what-we-do/network-reporting/netcore-netis-router-vulnerability-scan-report/ - https://vulners.com/metasploit/MSF:EXPLOIT-LINUX-MISC-NETCORE_UDP_53413_BACKDOOR- - https://www.vulncheck.com/advisories/netcore-netis-routers-backdoor-rce - https://www.exploit-db.com/exploits/43387
CVE ID: CVE-2025-34118 State: PUBLISHED Published: 2025-07-16T21:03:53.676Z Last Updated: 2025-07-17T20:02:15.488Z Vendors: Linknat Technology Products: VOS Manager Problem Types: CWE-22, CWE-20 Description: A path traversal vulnerability exists in Linknat VOS Manager versions prior to 2.1.9.07, including VOS2009 and early VOS3000 builds, that allows unauthenticated remote attackers to read arbitrary files on the server. The vulnerability is accessible via multiple localized subpaths such as '/eng/', '/chs/', or '/cht/', where the 'js/lang_en_us.js' or equivalent files are loaded. By injecting encoded traversal sequences such as '%c0%ae%c0%ae' into the request path, attackers can bypass inpu
loaded. By injecting encoded traversal sequences such as '%c0%ae%c0%ae' into the request path, attackers can bypass input validation and disclose sensitive files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.linknat.com/ - https://web.archive.org/web/20151013001957/http://www.wooyun.org/bugs/wooyun-2010-0145458 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/linknat_vos_traversal.rb - https://www.vulncheck.com/advisories/linknat-vos-manager-path-traversal-file-disclosure
CVE ID: CVE-2025-34119 State: PUBLISHED Published: 2025-07-16T21:04:35.633Z Last Updated: 2025-07-17T19:59:53.850Z Vendors: Tinasoft Products: EasyCafe Server Problem Types: CWE-668, CWE-306 Description: A remote file disclosure vulnerability exists in EasyCafe Server 2.2.14, exploitable by unauthenticated remote attackers via TCP port 831. The server listens for a custom protocol where opcode 0x43 can be used to request arbitrary files by absolute path. If the file exists and is accessible, its content is returned without authentication. This flaw allows attackers to retrieve sensitive files such as system configuration, password files, or application data. Additional Analyst Notes: - CISA
eve sensitive files such as system configuration, password files, or application data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/misc/easycafe_server_fileaccess.rb - https://www.exploit-db.com/exploits/39102 - https://www.vulncheck.com/advisories/easy-cafe-server-remote-file-disclosure
CVE ID: CVE-2025-34120 State: PUBLISHED Published: 2025-07-16T21:05:34.816Z Last Updated: 2025-11-19T14:36:49.930Z Vendors: LimeSurvey GmbH Products: LimeSurvey Problem Types: CWE-22, CWE-306 Description: An unauthenticated file download vulnerability exists in LimeSurvey versions from 2.0+ up to and including 2.06+ Build 151014. The application fails to validate serialized input to the admin backup endpoint (`index.php/admin/update/sa/backup`), allowing attackers to specify arbitrary file paths using a crafted `datasupdateinfo` payload. The files are packaged in a ZIP archive and made available for download without authentication. This vulnerability can be exploited to read arbitrary files
ive and made available for download without authentication. This vulnerability can be exploited to read arbitrary files on the host system, including sensitive OS and configuration files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20210123073627/https://www.limesurvey.org/blog/22-security/136-limesurvey-security-advisory-10-2015 - https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-lime-survey/ - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/admin/http/limesurvey_file_download.rb - https://packetstorm.news/files/id/180855 - https://www.vulncheck.com/advisories/limesu
ttp/limesurvey_file_download.rb - https://packetstorm.news/files/id/180855 - https://www.vulncheck.com/advisories/limesurvey-unauthenticated-arbitrary-file-download
CVE ID: CVE-2025-34121 State: PUBLISHED Published: 2025-07-16T21:06:44.747Z Last Updated: 2025-07-17T19:57:50.878Z Vendors: Idera Products: Up.Time Monitoring Station Problem Types: CWE-434, CWE-306 Description: An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The `wizards/post2file.php` script accepts arbitrary POST parameters, allowing attackers to upload crafted PHP files to the webroot. Successful exploitation results in remote code execution as the web server user. NOTE: The bypass for this vulnerability is tracked as CVE-2015-9263. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
his vulnerability is tracked as CVE-2015-9263. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/uptime_file_upload_1.rb - https://web.archive.org/web/20150210113937/http://www.security-assessment.com/files/documents/advisory/Up.Time%207.2%20-%20Arbitrary%20File%20Upload.pdf - https://www.exploit-db.com/exploits/38732 - https://www.vulncheck.com/advisories/idera-uptime-arbitrary-file-upload-rce
CVE ID: CVE-2025-34123 State: PUBLISHED Published: 2025-07-16T21:07:50.606Z Last Updated: 2025-11-19T01:29:06.477Z Vendors: VideoCharge Software Products: Studio Problem Types: CWE-121, CWE-20, CWE-94 Description: A stack-based buffer overflow vulnerability exists in VideoCharge Studio 2.12.3.685 when processing a specially crafted .VSC configuration file. The issue occurs due to improper handling of user-supplied data in the XML 'Name' attribute, leading to an SEH overwrite condition. An attacker can exploit this vulnerability by convincing a user to open a malicious .VSC file, resulting in arbitrary code execution under the context of the user. Additional Analyst Notes: - CISA ADP Vulnrich
file, resulting in arbitrary code execution under the context of the user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/29234 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/videocharge_studio.rb - https://www.vulncheck.com/advisories/video-charge-studio-seh-buffer-overflow
CVE ID: CVE-2025-34124 State: PUBLISHED Published: 2025-07-16T21:08:33.123Z Last Updated: 2025-07-17T19:39:42.701Z Vendors: The 3DO Company Products: Heroes of Might and Magic III Problem Types: CWE-121, CWE-20, CWE-94 Description: A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0 via malicious .h3m map files that exploit object sprite name parsing logic. The vulnerability occurs during in-game map loading when a crafted object name causes a buffer overflow, potentially allowing arbitrary code execution. Exploitation requires the victim to open a malicious map file within the game. Additional Analyst Notes: - CISA
ecution. Exploitation requires the victim to open a malicious map file within the game. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/homm3_h3m.rb - https://www.exploit-db.com/exploits/37716 - https://www.vulncheck.com/advisories/heroes-of-might-and-magic-iii-map-file-buffer-overflow