NfSpy

NfSpy - ID偽装NFSクライアント 著者：Daniel Miller NfSpyは、NFS共有をマウントする際のNFS資格情報の偽装を自動化するPythonライブラリです。含まれているクライアントプログラムは次の2つです。 nfspy は、LinuxでNFS共有をマウントするためにFilesystem in Userspace（FUSE）ライブラリを使用します。これにより、grepやfindのような通常のファイル検索・操作プログラムを使用してNFSエクスポートを探索できます。 nfspysh...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys バージョン 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...

CVE-2026-45766

A flaw was found in Suricata, a network Intrusion Detection System. Insufficiently bounded Network File System NFS parser state structures can be exploited by a remote attacker sending crafted NFS traffic. This can cause Suricata to consume excessive memory, leading to a denial of service...

sharesniffer

sharesniffer sharesniffer는 로컬 네트워크에서 열려 있거나 닫힌 파일 공유를 찾는 네트워크 분석 도구입니다. 열려 있는 cifs 및 nfs 공유의 자동 네트워크 검색과 자동 마운트를 포함합니다. 사용 방법 로컬 네트워크에서 열려 있거나 닫힌 nfs/smb 공유가 있는 모든 호스트를 찾는 예: root@kitploit: python sharesniffer.py 192.168.56.0/24 네트워크에서 가능한 라우터/방화벽을 제외하고 모든 호스트를 찾고, 열려 있는 nfs/smb 공유를 /mnt에 자동 마운트하...

CVE-2022-26937

CVE-2022-26937 一个用于检测 CVE-2022-26937 的包，该漏洞存在于微软的 NFS 实现中。 示例 你可以在 testing\traces 目录中包含的 PCAP 文件上运行此逻辑： root@kitploit: $ zeek -Cr CVE-2022-26937-exploited.pcap /Source/CVE-2022-26937/scripts/load.zeek $ cat notice.log separator \x09 setseparator , emptyfield empty unsetfield - path notice open...

CVE-2026-84549

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84544

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-43687

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory...

CVE-2026-43686

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory...

EUVD-2026-78122

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory...

CVE-2026-43686

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory...

CVE-2026-43686

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may lead to kernel memory...

EUVD-2026-77942

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory...

CVE-2026-43687

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory...

CVE-2026-43687

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Connecting to a malicious NFS server may disclose kernel memory...

EUVD-2026-77906

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84549

CVE-2026-84549 is an out-of-bounds read in the NFS client of macOS , addressed with improved bounds checking. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory , indicating a potential denial-of-service or local privilege escalation vector. The ...

EUVD-2026-77872

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84544

CVE-2026-84544 is an integer overflow in Apple's NFS client, addressed with improved input validation. Connecting a macOS system to a malicious NFS server can trigger the overflow, leading to unexpected system termination (denial of service) or kernel memory corruption , which may allow further e...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: nfs: Handling of failures in nfsgetlockcontext during unlock path When memory is insufficient, the allocation of nfslockcontext in nfsgetlockcontext fails and returns -ENOMEM. If we mistakenly treat an nfs4unlockdata structure...