562 matches found
krbrelayx
Krbrelayx - Kerberos relaying and unconstrained delegation abuse toolkit Toolkit for abusing Kerberos. Requires impacket, ldap3 and dnspython to function. It is recommended to install impacket from git directly to have the latest version available. More info about this toolkit available in my blo...
CVE-2000-0979
CVE-2000-0979 CVE-2000-0979.rb 是针对 Windows 95 SMB 服务利用 CVE-2000-0979 的独立工具。 msf20000979.rb 是 Metasploit 模块。你可以将其复制到 metasploit-framework ▸ modules ▸ auxiliary ▸ scanner ▸ smb 更多文档即将推出！ 原始公告 NSFOCUS Security AdvisorySA2000-05 主题： Microsoft Windows 9x NETBIOS 密码验证漏洞 发布日期： 2000 年 8 月 24 日...
canon-mf644
面向 Canon MF644 发布的工具和脚本 Pwn2Own 2021 漏洞利用 - CADM 中的漏洞（固件 10.02） 本仓库包含与该漏洞利用相关的以下文件： exploit.py ：针对固件 10.02 版本有效利用的 Python 漏洞利用程序 Makefile ：用于汇编 ARM shellcode 的 Makefile shellcodeninja.S ：用于从 TCP 套接字接收并显示图片的 ARM shellcode memdump ：构建漏洞利用载荷所需的固件内存转储 注意：该漏洞利用仅对 10.02 版本的固件有效。 Pwn2Own 2022 漏洞利用 -...
FakeNetBIOS
Note to author: if you would like this pulled from Github, I understand and will do so without question. Since you have provided source I @mubix figured it would be a good way to get improvments into the package | | | FakeNetBIOS ツール | | | | NetBIOS ホストのシミュレーション Windows 風 | | | Copyright � Patric...
CVE-2025-10230
CVE-2025-10230 — Samba WINS Hook 命令注入 作者对因使用本工具而造成的误用或损害不承担任何责任。 研究仅用于教育和防御目的。 描述 此仓库包含针对 CVE-2025-10230 的概念验证（PoC），该漏洞是 Samba 的 WINS hook 机制中的一个命令注入缺陷。 该缺陷影响满足以下条件的 Samba 安装： 已启用 wins support = yes 在 wins hook = ... 中定义了自定义 shell 命令 服务器收到一个畸形的 NetBIOS 注册 请求 NetBIOS 名称被直接拼接进 shell 调用 中，从而实现代码执行 此...
Astra Linux – Vulnerability in Samba
A flaw was discovered in Samba, particularly in the handling of the front-end WINS hook: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets is inserted into shell commands and executed b...
CVE-2026-3238
A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...
SUSE-SU-2026:2071-1 Security update for samba
This update for samba fixes the following issues - CVE-2026-2340: vfsworm does not block directory modification bsc1261158. - CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server bsc1261160. - CVE-2026-4408: Remote Code Execution in SAMR bsc1261163. - CVE-2026-4480: Unauthenticated...
Wireshark 2.2.x < 2.2.11 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.11 advisory. - In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was...
Wireshark 2.2.x < 2.2.11 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 2.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.11 advisory. - In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in...
CVE-2026-41429
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS packet handling path. When NetBIOS is enabled by calling NBNS.begin..., the device listens on UDP...
CVE-2026-41429
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS packet handling path. When NetBIOS is enabled by calling NBNS.begin..., the device listens on UDP...
CVE-2026-41429 Improper validation of NBNS name_len in arduino-esp32 NetBIOS leads to memory corruption
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS packet handling path. When NetBIOS is enabled by calling NBNS.begin..., the device listens on UDP...
CVE-2026-41429
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS packet handling path. When NetBIOS is enabled by calling NBNS.begin..., the device listens on UDP...
EUVD-2026-25619
arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior to 3.3.8, there is a remotely reachable memory corruption issue in the NBNS packet handling path. When NetBIOS is enabled by calling NBNS.begin..., the device listens on UDP...
PT-2026-35072
Name of the Vulnerable Software and Affected Versions arduino-esp32 versions prior to 3.3.8 Description A remotely reachable memory corruption issue exists in the NBNS packet handling path. When NetBIOS is enabled via the NBNS.begin function, the device listens on UDP port 137 and processes...
arduino-esp32 安全漏洞
Arduino-ESP32 is an open-source project by Espressif, designed for use with the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6, and ESP32-H2 boards. Versions of Arduino-ESP32 prior to 3.3.8 contained a security vulnerability. This vulnerability stemmed from a remote exploitable memory corruption...
CLSA-2026-1773667921 Fix CVE(s): CVE-2025-10230
SECURITY UPDATE: unauthenticated command injection via WINS hook in source4 NBT server. The "wins hook" parameter passed unsanitized NetBIOS names to a shell command, allowing arbitrary command execution by remote clients. - debian/patches/CVE-2025-10230.patch - CVE-2025-10230...
CLSA-2026-1773073974 Fix CVE(s): CVE-2025-10230
SECURITY UPDATE: command injection via improper NetBIOS name validation in shell hook handling CVE - debian/patches/CVE-2025-10230-1.patch: Validate NetBIOS names before passing them to hook shell command, rejecting characters outside alphanumeric, dot, underscore, or hyphen. Prevent command...