CallStranger

CallStranger このスクリプトは、CallStranger（CVE-2020-12695）の脆弱性を検査するために、Yunus Çadırcı（https://twitter.com/yunuscadirci）によって作成されました。攻撃者はこの脆弱性を以下の目的に利用できます: DLPを回避してデータを外部に送信する（データ窃取） 増幅反射型TCP DDoS / SYN Floodの送信元として、インターネットに公開された数百万台のUPnPデバイスを利用する インターネットに公開されたUPnPデバイスから内部ポートをスキャンする...

ipeeyoupeewepee

ipeeyoupeewepee 公開インターネット上のホスト（主にCiscoルーター）向けのスキャナおよび攻撃スイートです。これらのホストは、IP-in-IPおよびGREプロトコルでカプセル化された認証されていないパケットを転送します。 この脆弱性は「トンネリングプロトコルの安全でない実装」として知られ、CVE-2020-10136およびCVE-2024-7595で追跡されています。影響を受けるホストから任意のIPパケットを送信（ただし受信は不可）できます。...

callstranger-detector

CallStranger（CVE-2020-12695）の悪用試行を検出する Zeek パッケージ http://callstranger.com/ このパッケージは、CallStranger（CVE-2020-12695）の悪用試行とデータ外部送信を検出しようとするものです。これを実現するために、次の3つの重要な点を監視します。 1. Notify URL に RFC1918 または localnets アドレスではない IP アドレスが含まれている UPnP SUBSCRIBE コマンド。これは DDoS 増幅またはデータ外部送信の前兆である可能性があります 2. RFC1918 ま...

ntpscanner

ntpscanner NTPサーバーをスキャンしてCVE-2013-5211 NTP DDOS増幅脆弱性を検出します。...

AlmaLinux 9.2 [TuxCare] Security Update: cups-filters / cups-filters-devel / cups-filters-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1747430870)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1747430870 advisory. - CUPS is a standards-based, open-source printing system, and libppd can be used for legacy PPD file support. The libppd function...

AZL-105462 CVE-2026-35191 affecting package cloud-hypervisor 52.0.152-1

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

AZL-105612 CVE-2026-35191 affecting package openvmm 0.1.0-1

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

AZL-105885 CVE-2026-35191 affecting package rust 1.96.1-2

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...

PT-2026-102648

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description The OpenSSL QUIC server, when configured to skip address validation, incorrectly calculates the unvalidated credit limit. When processing a datagram containing multiple QUIC packets, the serv...

PYSEC-2026-1280 Cowrie has a SSRF vulnerability in wget/curl emulation enabling DDoS amplification

Summary A Server-Side Request Forgery SSRF vulnerability in Cowrie's emulated shell mode allows unauthenticated attackers to abuse the honeypot as an amplification vector for HTTP-based denial-of-service attacks against arbitrary third-party hosts. Details When Cowrie operates in emulated shell...

EUVD-2025-204642

Cowrie versions prior to 2.9.0 contain a server-side request forgery SSRF vulnerability in the emulated shell implementation of wget and curl. In the default emulated shell configuration, these command emulations perform real outbound HTTP requests to attacker-supplied destinations. Because no...

CVE-2024-51500 Failure to check for packets from the broadcast address allows potential DDoS amplification attack in Meshtastic firmware

Meshtastic firmware is a device firmware for the Meshtastic project. The Meshtastic firmware does not check for packets claiming to be from the special broadcast address 0xFFFFFFFF which could result in unexpected behavior and potential for DDoS attacks on the network. A malicious actor could cra...

Medium: cups-filters

Issue Overview: CUPS is a standards-based, open-source printing system, and cups-browsed contains network printing functionality including, but not limited to, auto-discovering print services and shared printers. cups-browsed binds to INADDRANY:631, causing it to trust any packet from any source,...

K000148279: CUPS vulnerability CVE-2024-47850

Security Advisory Description CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. The request is meant to probe the new printer bu...

SUSE CVE-2024-47850

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. The request is meant to probe the new printer but can be used to create DDoS...

CVE-2024-47850

A flaw was found in cups-browsed. This vulnerability allows an attacker to launch DDoS amplification attacks via an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added. Mitigation See the security bulletin for a detailed...

CVE-2024-47850

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. The request is meant to probe the new printer but can be used to create DDoS...

DEBIAN-CVE-2024-47850

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. The request is meant to probe the new printer but can be used to create DDoS...

CVE-2024-47850

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. The request is meant to probe the new printer but can be used to create DDoS...

UBUNTU-CVE-2024-47850

CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet requesting a printer to be added, a different vulnerability than CVE-2024-47176. The request is meant to probe the new printer but can be used to create DDoS...