Lucene search
+L

5959 matches found

RedHat Linux
RedHat Linux
added 2026/09/21 3:04 a.m.9 views

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

7.5CVSS0.01275EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/21 3:04 a.m.7 views

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

7.5CVSS0.01275EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/09/21 3:04 a.m.6 views

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

7.5CVSS0.00304EPSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/20 2:58 p.m.10 views

shellshock

shellshock scripts associated with bourne shell EVN function parsing vulnerability CVE-2014-6271 dhcpmon.py - This script monitors DHCP frames for potentially malicious characters within BOOTP and DHCP reply fields...

10CVSS8.4AI score0.99999EPSS
SaveExploits146
Kitploit
Kitploit
added 2026/09/20 8:47 a.m.10 views

CVE-2019-0785

CVE-2019-0785 Microsoft Windows DHCP To exploit. Please wait on, will you? I'm just coming!...

9.8CVSS8.2AI score0.4757EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/20 1:31 a.m.9 views

Vulnerability-DLink-CVE-2025-14659

CVE-2025-14659: D-Link DHCP Daemon Command Injection Analysis Recreate CVE Project | Offensive Security Author: Peter Lin Date: May 2026 Project Pitch: CVE-2025-14659 reported a command injection vulnerability targeting the DHCP daemon component present in the D-Link DIR-860LB1 wireless router...

9.8CVSS8.2AI score0.03905EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 5:04 p.m.11 views

freebsd-dhclient-poc

CVE-2020-7461 PoC de reproducción Autores: Moshe Kol, Shlomi Oberman PoC de reproducción de la vulnerabilidad de desbordamiento de búfer del heap en dhclient de FreeBSD al analizar la opción 119 de DHCP CVE-2020-7461. El problema reside en la función findsearchdomainnamelen del archivo...

7.5CVSS7.6AI score0.04126EPSS
SaveExploits1
NVD
NVD
added 2026/09/18 8:17 p.m.5 views

CVE-2026-57224

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::fordirection, so a...

6.5CVSS0.00403EPSS
SaveExploits0References8
CVE
CVE
added 2026/09/18 8:08 p.m.36 views

CVE-2026-57224

Suricata versions 8.0.0 through 8.0.6 are affected by a denial-of-service vulnerability in the DHCP parser (rust/src/dhcp/dhcp.rs) and RDP parser (rust/src/rdp/rdp.rs). Both parsers create stateless transactions without recording packet direction via AppLayerTxData::for_direction(). When a sensor...

6.5CVSS0.00403EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/18 8:08 p.m.7 views

CVE-2026-57224 Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::fordirection, so a...

6.5CVSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2026/09/18 8:08 p.m.13 views

CVE-2026-57224

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::fordirection, so a...

6.5CVSS5.7AI score0.00403EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 5:00 p.m.9 views

TP-Link-Archer-CR-700-XSS-Exploit

TP-Link-Archer-CR-700-XSS-Exploit Exploiting TP-Link Archer CR-700 Router. Responsibly Disclosed to TP-Link Step 1- On you linux machine Kali or Ubuntu type the following command gedit /etc/dhcp/dhclient.conf Comment out the line below send host-name = gethostname; Copy it to the line below it an...

5.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.12 views

EulerOS Virtualization 2.12.1 : dracut (EulerOS-SA-2026-3582)

According to the versions of the dracut packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted...

7.5CVSS0.01275EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/18 12:00 a.m.7 views

EulerOS 2.0 SP15 : dracut (EulerOS-SA-2026-3777)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...

7.5CVSS0.01275EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/17 4:54 p.m.4 views

CVE-2026-8674 Assertion failure in the DNS stub resolver with a long search domain

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

5.3CVSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/09/17 12:00 a.m.7 views

EulerOS 2.0 SP15 : dracut (EulerOS-SA-2026-3802)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...

7.5CVSS0.01275EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/16 12:31 a.m.8 views

EUVD-2026-80044

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP static IP and IP ACL management pages, including dhcpaddstaticipcgi, dhcpstaticipshowcgi, ipaclsetcgi, and ipaclshowcgi. Attackers can inject persistent malicious scripts through these components to...

5.4CVSS5.6AI score0.00182EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/16 12:31 a.m.9 views

EUVD-2026-80045

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in the DHCP dynamic IP display and ARP bind list display components handling hostname fields. A LAN-based attacker can inject malicious script through these hostname fields, which is later rendered by...

5.2CVSS5.6AI score0.00192EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/16 12:31 a.m.16 views

EUVD-2026-80007

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper address, and the relay agent would forward it to...

9.6CVSS5.8AI score0.00196EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/15 10:17 p.m.10 views

CVE-2026-76872

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in DHCP static IP and IP ACL management pages, including dhcpaddstaticipcgi, dhcpstaticipshowcgi, ipaclsetcgi, and ipaclshowcgi. Attackers can inject persistent malicious scripts through these components to...

5.4CVSS0.00182EPSS
SaveExploits0References2
Rows per page
Query Builder