<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: lizardsystems</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2018-25268: LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruc</title><link>https://patchthecve.com/cve/CVE-2018-25268.html</link><guid>https://patchthecve.com/cve/CVE-2018-25268.html</guid><pubDate>Wed, 17 Jun 2026 01:55:07 +0000</pubDate><description>HIGH 8.4: LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the application or potent</description></item><item><title>CVE-2018-25265: LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attacker</title><link>https://patchthecve.com/cve/CVE-2018-25265.html</link><guid>https://patchthecve.com/cve/CVE-2018-25265.html</guid><pubDate>Wed, 17 Jun 2026 01:55:07 +0000</pubDate><description>HIGH 8.4: LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exception handling mechanisms. Attackers can craft malicious payloads using egghunter techniques to locate and execute shellcode, trigger</description></item><item><title>CVE-2018-25259: Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field</title><link>https://patchthecve.com/cve/CVE-2018-25259.html</link><guid>https://patchthecve.com/cve/CVE-2018-25259.html</guid><pubDate>Wed, 17 Jun 2026 01:55:06 +0000</pubDate><description>HIGH 8.4: Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious input file with shellcode and jump instructions that overw</description></item></channel></rss>