5228 matches found
CVE-2022-26937
CVE-2022-26937 Ein Paket zur Erkennung von CVE-2022-26937, einer Schwachstelle in Microsofts NFS-Implementierung. Beispiel Sie können diese Logik auf der enthaltenen PCAP im Verzeichnis testing\traces ausführen: root@kitploit: $ zeek -Cr CVE-2022-26937-exploited.pcap...
CVE-2022-34715-POC
CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys versão 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...
NfSpy
NfSpy - um cliente NFS de falsificação de ID por Daniel Miller NfSpy é uma biblioteca Python para automatizar a falsificação de credenciais NFS ao montar uma partilha NFS. Estão incluídos dois programas cliente: nfspy usa a biblioteca Filesystem in Userspace FUSE para montar uma partilha NFS no...
CVE-2022-30136
CVE-2022-30136 Windows Network File System 원격 익스플로잇 PoC 저자: Ricardo Narvaja 데모 목적으로만 사용하십시오. 전체 익스플로잇은 취약한 Windows Server 시스템에서 작동합니다. 분석 문서 확인: Analysis of CVE-2022-30136 “Windows Network File System Vulnerability“. 사용법 CVE-2022-22029 “Windows Network File System 취약점“ 분석 이 글은 Core Impact 익스플로잇...
CVE-2022-22029-NFS-Server-
Windows Network File System Remote Code Execution Vulnerability CVE-2022-22039 Um diese Sicherheitsanfälligkeit erfolgreich auszunutzen, muss ein Angreifer eine Race-Condition gewinnen. Ein nicht authentifizierter, sorgfältig konstruierter Aufruf an einen Network File System NFS-Dienst könnte...
sharesniffer
sharesniffer sharesniffer ist ein Netzwerkanalysewerkzeug zum Auffinden offener und geschlossener Dateifreigaben in Ihrem lokalen Netzwerk. Es beinhaltet automatische Netzwerkerkennung und automatisches Einhängen aller offenen CIFS- und NFS-Freigaben. Verwendung Beispiel zum Finden aller Hosts in...
CVE-2026-74730
A flaw was found in the Linux kernel's Network File System NFS. This vulnerability involves improper memory handling where a critical data structure is released prematurely if a FREESTATEID operation is delayed. This can lead to memory corruption, potentially causing system instability or a denia...
CVE-2026-74730
In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the 'struct...
CVE-2026-74730 NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the 'struct...
CVE-2026-74730 NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the 'struct...
CVE-2026-74730
CVE-2026-74730 is a use-after-free vulnerability in the Linux kernel NFS subsystem . When a FREE_STATEID operation is delayed, the struct nfs_server object can be freed while operations are still in flight, leading to memory corruption. The fix bumps the refcount of struct nfs_server for the dura...
EUVD-2026-64417
In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the 'struct...
PT-2026-79735
In the Linux kernel, the following vulnerability has been resolved: NFS: Pin the 'struct nfs server' during a FREE STATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREE STATEID operation gets delayed for whatever reason. Fix this by bumping the refcount of the...
Linux Distros Unpatched Vulnerability : CVE-2026-74730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFS: Pin the 'struct nfsserver' during a FREESTATEID call Dan Aloni reports that he was able to hit a use-after-free bug if a FREESTATEID operation gets delayed...
CVE-2026-50112
Apache CloudStack versions 4.14.0.0 through 4.20.3.0 and 4.21.0.0 through 4.22.1.0 are affected by two related vulnerabilities in template download handling. When a tenant registers a VM template with directDownload=true pointing to a .metalink file, the management server fetches the metalink XML...
CVE-2026-72468
A flaw was found in the Linux kernel's xprtrdma component. A local administrator can exploit a race condition during an NFS/RDMA mount operation against RDMA device removal. This can lead to a null pointer dereference, causing the kernel to crash and resulting in a Denial of Service DoS...
CVE-2026-72467
A flaw was found in the Linux kernel's xprtrdma module. The system fails to properly check the return value of frwrwpcreate, which is responsible for creating a Memory Region. If this creation fails, a subsequent Network File System NFS over Remote Direct Memory Access RDMA read operation with an...
CVE-2026-16686
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...
CVE-2026-16686
IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 have an improper-authentication flaw allowing unauthenticated remote attackers to access NFS-exported filesystems. CVSS 8.2 (HIGH), network-exploitable with no privileges required. No exploitation or patch details provided; refer to IBM support advisory for ...