CVE-2020-7461

CVE-2020-7461 FreeBSD의 DHCP 취약점 NAME:WRECK에 대한 PoC 교육 목적으로만 사용하세요 환경 호스트: macOS 11.2.1 Vagrant: 2.2.15 피해자: FreeBSD 12.1-STABLE r364849 공격자: Ubuntu 20.04 면책 조항 이 PoC는 악용을 방지하기 위해 RCE 대신 DoS를 유발합니다. PoC VirtualBox에서 DHCP 서버 끄기 VM 실행 root@kitploit: $ cd victim $ vagrant up $ cd .. root@kitploit: $ ...

A week in security (April 12 – 18)

Last week on Malwarebytes Labs, our podcast featured Troy Hunt, Chloé Messdaghi, and Tanya Janca who discussed security fatigue with us. We announced the release of the Malwarebytes SMB Cybersecurity Trust & Confidence Report 2021, a first-of-its-kind survey of the hardworking IT professionals on...

NAME:WRECK DNS Vulnerabilities

Cybersecurity researchers from Forescout and JSOF have released a report on a set of nine vulnerabilities—referred to as NAME:WRECK—affecting Domain Name System DNS implementations. NAME:WRECK affects at least four common TCP/IP stacks—FreeBSD, IPNet, NetX, and Nucleus NET—that are used in Intern...

100M More IoT Devices Are Exposed—and They Won’t Be the Last

The Name:Wreck flaws in TCP/IP are the latest in a series of vulnerabilities with global implications...