CVE-2017-14980

Description

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

Sync Breeze Enterprise GET Buffer Overflow
exploit/windows/http/syncbreeze_bof

GitHub 8 repositories

LipeOzyy/CVE-2017-14980_syncbreeze_10.0.28_bof ★ 2 · May 7, 2025
godoy-sec/CVE-2017-14980 ★ 1 · May 27, 2026

Study of a classic stack-based buffer overflow vulnerability in a controlled lab environment for educational purposes.
TheMalwareGuardian/CVE-2017-14980 ★ 1 · Mar 19, 2026

Stack-based buffer overflow in Sync Breeze Enterprise 10.0.28 reachable through the /login handler, demonstrating how unchecked input length can corrupt stack memory.
ahmedmamdouh6/CVE-2017-14980 ★ 0 · May 10, 2026

CVE-2017-14980 python exploitation to RCE
0xkr3pt0n/CVE-2017-14980 ★ 0 · May 9, 2026

CVE-2017-14980 python exploit
DaviGSantana/CVE-2017-14980 ★ 0 · Jan 20, 2026

STACK BUFFER OVERFLOW EXPLOIT RESULTING IN REMOTE CODE EXECUTION
xn0kkx/Exploit_Sync_Breeze_v10.0.28_CVE-2017-14980 ★ 0 · Jan 30, 2025

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.
TheDarthMole/CVE-2017-14980 ★ 0 · Feb 3, 2023

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References

http://packetstormsecurity.com/files/144452/Sync-Breeze-Enterprise-10.0.28-Buffer-Overflow.html