106 matches found
CVE-2022-23093
CVE-2022-23093 Desbordamiento de pila en FreeBSD Información El shellcode que se usa por defecto es FreeBSD/x86-64 - execve - 28 bytes de Gitsnik , cámbialo y pon el tuyo propio para comenzar. Detalles de la Vulnerabilidad La utilidad ping, utilizada para solicitar un ICMP ECHORESPONSE de un host...
openbsd_ov1
OpenBSD TCP/IP overflow Tested with latest OpenBSD 7.2 Details: root@kitploit: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN - uchar ip;...
DrayTek-Exploit
CVE-2022-23093 FreeBSD Stack-Based Overflow Informations ⚠️ The shellcode that is used by default is FreeBSD/x86-64 - execve - 28 bytes from Gitsnik change it and put your own one for starting ⚠️ Details of Vulnerability The ping utility, used to solicit an ICMP ECHORESPONSE from a host or gateway,...
CVE-2026-16839
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
CVE-2026-16839
Affected products: IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1. Root cause: integer underflow in the IPv4 IP-options parser, exploitable remotely with no authentication. Impact: CVSS 9.4 (Critical) — high integrity/availability, low confidentiality. Exploitation status: no in-the-wild exploitation or ...
EUVD-2026-62728
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
CVE-2026-16839 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100760)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Reco...
CVE-2026-53249
In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Record Route LSRR and Strict Source and Record Route SSRR IP options to users with CAPNETRAW capability. This prevents unprivileged...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002160)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002160 advisory. The cipsov4validate function in net/ipv4/cipsoipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service NULL pointer dereference and...
CVE-2021-31344
A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0, SIMOTICS CONNECT 400 All versions V1.0.0.0. ICMP echo packets with fake IP...
CVE-1999-0905
Denial of service in Axent Raptor firewall via malformed zero-length IP options...
EUVD-2002-1811
Malware in sbrugna...
EUVD-2002-0522
Malware in sbrugna...
EUVD-2006-0845
Malware in sbrugna...
EUVD-2021-18254
Malware in sbrugna...
EUVD-2017-15039
Malware in sbrugna...
CVE-2022-23093
ping reads raw IP packets from the network to process responses in the prpack function. As part of processing a response ping has to reconstruct the IP header, the ICMP header and if present a "quoted packet," which represents the packet that generated an ICMP error. The quoted packet again has a...
kernel: ipvlan: out-of-bounds write caused by unclear skb->cb
A flaw was found in the IPVLAN network driver in the Linux kernel. This issue is caused by missing skb-cb initialization in ipoptionsecho and can lead to an out-of-bounds write stack overflow. This may allow a local user to cause a denial of service or potentially achieve local privilege escalati...
CVE-2023-42754
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer skb was assumed to be associated with a device before calling ipoptionscompile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAPNETADMIN privileges t...