CVE-2018-6892

An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe Sync" client application listening on port 8888 can send a malicious payload causing a buffer overflow condition. This will result in an attacker controlling the program's execution flow and allowing arbitrary code execution.

• CWE-119

• http://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html
• http://packetstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.html
• http://packetstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.html
• https://blogs.securiteam.com/index.php/archives/3669Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44027/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44175/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45197/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/46250/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/48840
• http://hyp3rlinx.altervista.org/advisories/CLOUDME-SYNC-UNAUTHENTICATED-REMOTE-BUFFER-OVERFLOW.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/157407/CloudMe-1.11.2-Buffer-Overflow.html
• http://packetstormsecurity.com/files/158716/CloudMe-1.11.2-SEH-Buffer-Overflow.html
• http://packetstormsecurity.com/files/159327/CloudMe-1.11.2-Buffer-Overflow.html
• https://blogs.securiteam.com/index.php/archives/3669Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44027/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44175/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45197/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/46250/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/48840

Published

Feb 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6883Piwigo before 2.9.3 has SQL injection in admin/tags.php in t…
• CVE-2018-6885An issue was discovered in MicroStrategy Web Services (the M…
• CVE-2018-6888An issue was discovered in Typesetter 5.1. The User Permissi…
• CVE-2018-6889An issue was discovered in Typesetter 5.1. It suffers from a…
• CVE-2018-6890Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1…
• CVE-2018-6891Bookly #1 WordPress Booking Plugin Lite before 14.5 has XSS …6.1
• CVE-2018-6893controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL I…
• CVE-2018-6900PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the…
• CVE-2018-6902PHP Scripts Mall Image Sharing Script 1.3.3 has XSS via the …
• CVE-2018-6903PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 us…
• CVE-2018-6904PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the Use…
• CVE-2018-6905The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS v…