1293 matches found
cve-2020-00796
CVE-2020–0796 脆弱性の特定と緩和について CVE-2020–0796 は、Server Message Block 3.0 SMBv3 ネットワーク通信プロトコルに存在する事前リモートコード実行の脆弱性であり、Microsoft は 2020 年 3 月の火曜日の更新プログラムの一部としてこの問題に対処しませんでした。 使用方法 python3 cve-2020-0796-scanner.py IP CVE-2020-0796 はどのデバイスに影響を与えますか？ SMBプロトコルにおけるパケット要求ネゴシエーション...
polymorph
Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...
boofuzz
.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...
termshark
Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...
smb
SMB 一个用于通过SMB通信的Go包。目前仅支持客户端功能的最小实现。 以下是一个示例客户端，用于建立与服务器的会话： package main import "log" "github.com/stacktitan/smb/smb" func main host := "172.16.248.192" options := smb.Options Host: host, Port: 445, User: "alice", Domain: "corp", Workstation: "", Password: "Password123!", debug := false session,...
doona
Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...
fuzzowski
Fuzzowski █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski Network Fuzzer █ █ █ █ 🄯 Fuzzers, inc. ██ ██ by Mario Rivas The idea is to be the Network Protocol Fuzzer that we will want to use. The aim of this tool is to assist during the whole proces...
metateta
Metateta Metateta 自動化ツール Metasploitを使用したネットワークプロトコルのスキャンおよびエクスプロイト用 大規模ネットワークの高速ペネトレーションテスト用 できること smb、smtp、snmpなどの特定のネットワークプロトコル向けのすべてのmetasploitモジュールでスキャン 特定のネットワークプロトコルに対してすべてのAuxiliaryモジュールを実行 特定のネットワークプロトコルに対してすべての可能なMetasploit Exploitを実行 実際のペンテストには推奨されません...
Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8842-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8842-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
USN-8842-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Network drivers; - TCM subsystem; - B.A.T.M.A.N. meshing protocol; - HSR network protocol; -...
cve-2020-0796
CVE-2020-0796の脆弱性をその場で特定し緩和する CVE-2020-0796は、Server Message Block 3.0 SMBv3ネットワーク通信プロトコルに存在するリモートコード実行前の脆弱性であり、Microsoftは2020年3月の Tuesdayでこの問題に対処しない。 使い方 python3 cve-2020-0796-scanner.py IP CVE-2020-0796はどのデバイスに影響を与えるか？ SMBプロトコルでのパケット要求ネゴシエーション 脆弱性の詳細とその緩和方法については、私の投稿を確認してください；...
zeek-jetdirect
zeek-jetdirect 用 Zeek パッケージ .. image::...
CVE-2025-14847
🚨 CVE-2025-14847 — “MongoBleed” 未認証のメモリ開示脆弱性（高深刻度） 📖 目次 概要 技術的詳細 深刻度とCVSS 影響を受けるバージョン 実際の影響 悪用の概要 検出の手引き 修復 一時的な緩和策 セキュリティチェックリスト まとめ 🔎 概要 CVE-2025-14847 （通称 “MongoBleed” ）は、MongoDB Serverのネットワークプロトコル処理における脆弱性です。 リモートの未認証攻撃者 が、脆弱なMongoDBプロセスの未初期化ヒープメモリ を読み取ることを可能にします。 これにより、以下のような機密情報が漏洩する可能性がありま...
Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8816-1)
The remote Ubuntu 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8816-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
Vulnerability of the Server component: The Connection Handling module of the MySQL Cluster database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server: Connection Handling component of the MySQL Cluster database management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: sctp: Handle the error returned from sctpauthasocinitactivekey. When an error is returned from sctpauthasocinitactivekey, the activekey is not actually updated. The old shkey remains freed while it’s still being used as the activ...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
A flaw was discovered in the Linux kernel’s NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packets when using NVMe over TCP. This can lead to the NVMe driver dereferencing a NULL pointer, resulting in kernel panic and a denial of service...
EUVD-2026-71480
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements...
EUVD-2026-66359
The OpenRGB network protocol allows to write attacker controlled strings into arbitrary file system paths extension of CVE-2026-59682. This allows either a full system compromise from local or remote if the daemon is running as root or a full account takeover if the daemon is running in user...