Cyber Posture

CVE-2025-0529

MediumPublic PoC

Published: 17 January 2025

Published
17 January 2025
Modified
23 October 2025
KEV Added
Patch
CVSS Score 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0005 16.8th percentile
Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-0529 is a medium-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Fabian Train Ticket Reservation System. Its CVSS base score is 5.3 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 16.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Privilege Escalation (T1068). What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly validates username inputs in the login form to prevent stack-based buffer overflows from improper restriction of operations within memory bounds.

prevent

Implements memory safeguards like stack canaries and DEP to protect against exploitation of the stack-based buffer overflow in the login component.

prevent

Requires timely identification, reporting, and correction of the specific buffer overflow flaw in the Train Ticket Reservation System login form.

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

Stack-based buffer overflow in login form enables local exploitation for arbitrary code execution and privilege escalation if run with elevated privileges.

NVD Description

A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attacking locally is…

more

a requirement. The exploit has been disclosed to the public and may be used.

Deeper analysisAI

CVE-2025-0529 is a critical stack-based buffer overflow vulnerability in code-projects Train Ticket Reservation System 1.0, specifically affecting an unknown part of the Login Form component. The issue arises from manipulation of the username argument, as identified under CWEs-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-121 (Stack-based Buffer Overflow), and CWE-787 (Out-of-bounds Write). It received a CVSS v3.1 base score of 5.3 (AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) and was published on 2025-01-17.

Exploitation requires local access with low privileges and low attack complexity, with no user interaction needed. A local attacker could manipulate the username input during login to trigger the buffer overflow, potentially leading to limited impacts on confidentiality, integrity, and availability, such as partial data exposure, modification, or denial of service.

Advisories from VulDB (ctiid.292413, id.292413, submit.478447) document the vulnerability, while a GitHub Gist provides a publicly disclosed exploit. The original project page at code-projects.org hosts the affected Train Ticket Reservation System 1.0 source code. No patches or specific mitigations are detailed in the available references.

The exploit has been publicly disclosed and may be used by attackers, though no real-world exploitation in the wild is noted.

Details

CWE(s)

Affected Products

fabian
train ticket reservation system
1.0

CVEs Like This One

CVE-2026-2016Shared CWE-119, CWE-121
CVE-2025-1187Shared CWE-119, CWE-121
CVE-2026-3137Shared CWE-119, CWE-121
CVE-2026-5611Shared CWE-119, CWE-121
CVE-2026-5154Shared CWE-119, CWE-121
CVE-2026-3810Shared CWE-119, CWE-121
CVE-2025-15413Shared CWE-119, CWE-787
CVE-2026-20698Shared CWE-119, CWE-787
CVE-2025-0283Shared CWE-121, CWE-787
CVE-2026-1418Shared CWE-119, CWE-787

References