Windows-CVE-2024-38063

Windows CVE-2024-38063 CVE ID: CVE-2024-38063 CVSS 3.1 Score: 9.8 Critical EPSS Score: Low - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impact: Remote Code Execution Affected Components: Windows TCP/IP stack Attack Vector: Network Remote Vulnerability Details...

Docker-Container-CVE-2020-13401

CVE-2020-13401 Study Study on CVE-2020-13401 vulnerability of containers in dockers older than 19.03.11 Containers that are created with Docker Engine versions before 19.03.11 are vulnerable to receive and apply fake RA Router Advertisement messages from other containers in the network. Receiving...

thc-ipv6

THC-IPV6-ATTACK-TOOLKIT c 2005-2022 [email protected] https://github.com/vanhauser-thc/thc-ipv6 root@kitploit: Licensed under AGPLv3 see LICENSE file INTRODUCTION This code was inspired when I got into touch with IPv6, learned more and more about it - and then found no tools to play read:...

ipv6tools

IPv6Tools The IPv6Tools framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper...

Windows-CVE-2024-38063

Windows-TCP/IP-IPv6CVE-2024-38063 La vulnerabilidad CVE-2024-38063 es una vulnerabilidad de ejecución remota de código presente en el componente TCP/IP del sistema operativo Windows. Según la introducción oficial de Microsoft, el nivel de gravedad máximo de esta vulnerabilidad es crítico, con una...

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

Combined Covert Channel: CVE-2023-1206 + CVE-2024-49882 Overview This project demonstrates a covert communication channel using two Linux kernel vulnerabilities: Component| CVE| Purpose ---|---|--- Sync Channel| CVE-2023-1206| Clock synchronization via IPv6 hash collision timing Data Channel|...

ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts

Summary Address6.isLinkLocal recognizes fe80::/64 rather than fe80::/10. Link-local unicast is the whole /10 under RFC 4291 §2.4 and the IANA IPv6 Special-Purpose Address Registry, so the method returns false for every link-local address outside the one /64 that stateless address autoconfiguratio...

simplewall

simplewall Definitely for advanced users. Description: Simple tool to configure Windows Filtering Platform WFP which can configure network activity on your computer. The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can...

QueenSono

QueenSono Exfiltración de Datos ICMP Un Paquete Golang para Exfiltración de Datos con protocolo ICMP IPv4 & IPv6. La herramienta QueenSono solo se basa en el hecho de que el protocolo ICMP no es monitoreado. Es bastante común. También podría usarse dentro de un sistema con inspección básica de IC...

CVE-2022-25061

CVE-2022-25061 This script exploits a remote command execution vulnerability under the oalsetIp6DefaultRoute component in the TPLink WR840N router...

sslsplit

SSLsplit - transparent SSL/TLS interception https://www.roe.ch/SSLsplit Overview SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is...

CVE-2020-16899

CVE-2020-16899: Microsoft Windows TCP/IP Denial of Service Vulnerability CVSS Score: 7.5 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced a critical vulnerability in the Windows IPv6 stack, which allows an attacker to send...

gitlab-SSRF-redis-RCE

gitlab-SSRF+CRLF-Redis-RCE GitLab 11.4.7 SSRF+CRLF Injection Combined with Redis Remote Code Execution 0x00 Vulnerability environment root@kitploit: root@kali: cd gitlab-docker root@kali: docker-compose up -d root@kali: docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES cf8c38aef6...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_158_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

CVE-2026-101910

A flaw was found in ip-address. The address classification mechanism fails to identify the local-use Network Address Translation NAT64 range as private. A remote attacker can exploit this by submitting an internal address formatted within this IPv6 prefix to an application that relies on the...

CVE-2026-101913

A flaw was found in ip-address. The library fails to validate the complete range of IPv6 link-local addresses during address classification checks. A remote attacker can provide a specially crafted IPv6 address to bypass security controls that rely on this verification. Successful exploitation ca...

CVE-2026-101912

A flaw was found in the ip-address library. This vulnerability allows a remote attacker to bypass security restrictions, such as Internet Protocol IP allowlists or denylists. The library's subnet containment checks fail to verify whether the compared addresses belong to the same address family,...

CVE-2026-101911

A flaw was found in the ip-address library. A remote attacker can exploit this vulnerability by supplying an excessively large IPv6 address string to an application that parses input without length limits. The parser attempts to process the unbounded input and generate disproportionately large...

CVE-2026-101913

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address6 isLinkLocal method in src/ipv6.ts recognizes only fe80::/64 instead of the complete fe80::/10 IPv6 link-local range. An attacker-controlled address elsewhere in fe80::/10 can...