Lucene search
+L

621 matches found

Kitploit
Kitploit
•added 2026/10/20 11:35 a.m.•76 views

krbrelayx

Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/18 7:20 p.m.•22 views

FakeNetBIOS

Note to author: if you would like this pulled from Github, I understand and will do so without question. Since you have provided source I @mubix figured it would be a good way to get improvments into the package | | | FakeNetBIOS Tools | | | | Simulation of NetBIOS hosts Windows-like | | |...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/18 6:54 p.m.•17 views

canon-mf644

Released tools and scripts for Canon MF644 Exploit for Pwn2Own 2021 - Vulnerability in CADM firmware 10.02 This repository contains the following files related to the exploit: exploit.py : Python exploit working against firmware in version 10.02 Makefile : Makefile used to assemble the ARM...

6.1AI score
SaveExploits0References10
Kitploit
Kitploit
•added 2026/10/18 7:11 a.m.•15 views

CVE-2025-10230

CVE-2025-10230 — Samba WINS Hook Command Injection The author assumes no liability for misuse or damage caused by this tool. Research is provided strictly for educational and defensive purposes. Description This repository contains a Proof-of-Concept PoC for CVE-2025-10230 , a command-injection...

10CVSS9AI score0.39769EPSS
SaveExploits2
NVD
NVD
•added 2026/10/13 7:19 p.m.•7 views

CVE-2026-70054

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00412EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 7:01 p.m.•16 views

CVE-2026-70054

A heap-based buffer overflow exists in Windows NetBIOS that allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impacts on confidentiality, integrity, and availability. An official fix is available, and no specific exploit code or in-the-wild ex...

7.8CVSS6.1AI score0.00412EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/10/13 2:00 p.m.•8 views

Windows NetBIOS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally...

7.8CVSS6.2AI score0.00412EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•6 views

Microsoft Windows: CVE-2026-70054: Windows NetBIOS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00412EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•3 views

CVE-2026-70054: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00412EPSS
SaveExploits0References2
Kitploit
Kitploit
•added 2026/10/06 10:04 p.m.•30 views

CVE-2000-0979

CVE-2000-0979 CVE-2000-0979.rb — это автономный инструмент для эксплуатации CVE-2000-0979 против службы SMB Windows 95. msf20000979.rb — это модуль Metasploit. Вы можете скопировать его в ⁨metasploit-framework⁩ ▸ ⁨modules⁩ ▸ ⁨auxiliary⁩ ▸ scanner⁩ ▸ ⁨smb⁩ Более подробная документация появится в...

6.4CVSS6.2AI score0.75054EPSS
SaveExploits5
KittySploit
KittySploit
•added 2026/07/31 6:12 p.m.•4 views

HTTP NTLM Info

Sends an NTLM Type-1 negotiate and parses the Type-2 challenge for NetBIOS / DNS domain and computer names NSE http-ntlm-info. !/usr/bin/env python3 -- coding: utf-8 -- """HTTP NTLM challenge info NSE http-ntlm-info.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

5.8AI score
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/06/08 7:34 a.m.•35 views

CVE-2026-3238

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...

7.5CVSS6.8AI score0.02023EPSS
SaveExploits0
osv_suse
osv_suse
•added 2026/05/26 12:34 p.m.•25 views

SUSE-SU-2026:2071-1 Security update for samba

This update for samba fixes the following issues - CVE-2026-2340: vfsworm does not block directory modification bsc1261158. - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server bsc1261160. - CVE-2026-4408: Remote Code Execution in SAMR bsc1261163. - CVE-2026-4480: Unauthenticated...

9.8CVSS7.2AI score0.1393EPSS
SaveExploits12References10
Tenable Nessus
Tenable Nessus
•added 2026/05/01 12:00 a.m.•14 views

Wireshark 2.2.x < 2.2.11 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.11 advisory. - In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was...

7.5CVSS6.8AI score0.16655EPSS
SaveExploits2References10
Tenable Nessus
Tenable Nessus
•added 2026/05/01 12:00 a.m.•15 views

Wireshark 2.2.x < 2.2.11 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.11 advisory. - In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in...

7.5CVSS6.8AI score0.16655EPSS
SaveExploits2References10
RedhatCVE
RedhatCVE
•added 2026/04/27 7:23 p.m.•26 views

CVE-2026-41429

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS packet handling path. When NetBIOS is enabled by calling NBNS.begin..., the device listens on UDP...

8.8CVSS6.2AI score0.00339EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/24 8:16 p.m.•21 views

CVE-2026-41429

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS packet handling path. When NetBIOS is enabled by calling NBNS.begin..., the device listens on UDP...

8.8CVSS0.00339EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/04/24 7:19 p.m.•22 views

EUVD-2026-25619

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS packet handling path. When NetBIOS is enabled by calling NBNS.begin..., the device listens on UDP...

8.8CVSS6.2AI score0.00339EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/04/24 7:19 p.m.•19 views

CVE-2026-41429

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS packet handling path. When NetBIOS is enabled by calling NBNS.begin..., the device listens on UDP...

8.8CVSS6.2AI score0.00339EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2026/04/24 7:19 p.m.•22 views

CVE-2026-41429 Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption

arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS packet handling path. When NetBIOS is enabled by calling NBNS.begin..., the device listens on UDP...

8.8CVSS6AI score
SaveExploits0References3
Rows per page
Query Builder