CVE-2026-24294

CVE-2026-24294 - SMB任意ポート経由のローカルNTLMリフレクションによるLPE Windows Server 2025における、Windows 11 24H2 / Server 2025で導入されたSMB任意ポート機能を悪用した、NTLMリフレクションによるローカル権限昇格。 脆弱性 Windows 11 24H2 / Server 2025では、任意のTCPポートへの接続を可能にするSMBクライアント機能が導入されました（net use \host\share /tcpport:PORT）。SMBセッションマルチプレクシング（MS-SMB2 Section...

CVE-2026-47861

An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrary internal or external host and port of the attacker's choosing. Spring Integration 7.1.0 Spring Integration 7.0.0 -...

EUVD-2026-8860

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode PASV response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the...

CVE-2026-28295

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode PASV response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the...

CVE-2026-28295

CVE-2026-28295 affects the FTP GVfs backend. A flaw causes the client to unconditionally trust the PASV response from an FTP server, which may contain an arbitrary IP and port. The client then attempts to connect to that endpoint, enabling a malicious server to probe for open ports reachable from...

CVE-2026-28295

A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode PASV response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the...

PT-2026-22157

Name of the Vulnerable Software and Affected Versions FTP GVfs backend affected versions not specified Description A flaw exists in the FTP GVfs backend where a malicious FTP server can exploit the system by providing a crafted passive mode PASV response containing an arbitrary IP address and por...

EUVD-2011-4429

Malware in sbrugna...

EUVD-2001-0156

Malware in sbrugna...

EUVD-2011-4431

Malware in sbrugna...

CVE-2024-51980

An unauthenticated attacker may perform a limited server side request forgery SSRF, forcing the target device to open a TCP connection to an arbitrary port number on an arbitrary IP address. This SSRF leverages the WS-Addressing ReplyTo element in a Web service HTTP TCP port 80 SOAP request. The...

CVE-2024-55407

An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL requests...

CVE-2011-4499

The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMappi...

CVE-2011-4504

The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

CVE-2011-4501

The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers...

CVE-2024-55407

An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL requests...

CVE-2024-55407

The ITE IO Access v1.0.0.0 software by ITE Tech. Inc contains a vulnerability in the DeviceloControl function. An attacker can perform arbitrary port read and write actions by supplying crafted IOCTL requests , potentially leading to unauthorized data modification or access. As a temporary workar...

CVE-2024-55407

An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL requests...

ITE IO Access 安全漏洞

ITE IO Access is an application from China Lianyang ITE. A security vulnerability exists in ITE IO Access version 1.0.0.0, which stems from a problem with the DeviceloControl feature that allows an attacker to perform arbitrary port read and write operations via a constructed IOCTL request...

PT-2025-3109 · Ite · Ite Io Access

Name of the Vulnerable Software and Affected Versions: ITE IO Access version 1.0.0.0 Description: An issue in the DeviceloControl function allows attackers to perform arbitrary port read and write actions via supplying crafted IOCTL requests. This enables attackers to manipulate ports, potentiall...