kernel: xfrm: input: hold netns during deferred transport reinjection

A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...

kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

Masscan-Report

Masscan 报告生成器 一个 Python 工具，可基于 masscan 的 JSON 输出生成交互式 React 驱动的 HTML 可视化报告，包含 D3.js 力导向网络图。 截图 功能特性 交互式网络图 力导向 D3.js 可视化 ，展示网络拓扑结构 层级结构 ：互联网 → A 类 /8 → B 类 /16 → C 类 /24 → 主机 → 端口 拖拽与缩放 ，自由探索网络 按节点类型颜色编码 （主机、端口、网段） 搜索与过滤 实时搜索 - 输入即过滤主机和端口 端口搜索前缀 - 使用 : 仅搜索端口（例如 :443） 通配符支持 - 使用 进行模式匹配（例如...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

gp_netSecDSS

netSecDSS 面向中小企业网络与系统安全风险评估的决策支持系统 一个基于 Docker 的网络安全监控平台，专为无力承担商业 SIEM 工具的中小企业设计。它模拟了一个真实的多子网中小企业网络，针对该网络运行分阶段攻击场景，使用映射到 MITRE ATT&CK 的 Python 流水线实时检测和分类威胁，定量评分风险，并通过 Grafana 仪表盘和一份通俗易懂的管理报告展示结果。 最初作为巴勒斯坦技术大学（卡杜里）的毕业项目开发。 功能 使用 Docker 模拟一个中小企业网络——包含人力资源、财务、销售和 IT 子网以及一个 DMZ Web 服务器 生成真实的背景流量和 11...

PSO - Printer Security Offensive

🖨️ PSO - 打印机安全攻击工具 版本 0.4.0 | 更新日志 “打印机的 Nmap” - 用于打印机渗透测试的攻击性安全工具。 快速。专注。无冗余。 ⚠️ 法律声明 PSO 包含评估 和利用 功能。使用前务必获得明确授权。 安全模式： 扫描 + IPP 查询 攻击模式 --aggressive：PJL 文件系统利用 未经授权的网络扫描是违法的。请负责任地使用。 功能特性 ✅ 主动网络扫描 - 支持 CIDR 范围及自定义端口 ✅ 端口范围 - 高效扫描 443,631,5000-6000,9100 ✅ 二进制 IPP 协议 - 原生 IPP 精准获取打印机属性 ✅ PJL...

quick-fix-cve-2024-38063

quick-fix-cve-2024-38063 用于修复 cve-2024-38063 的快速 PowerShell 脚本 捐赠 如果您想支持我的工作，可以通过以下门罗币地址向我捐赠： 4B9WQivaHfd3miDfPKEfCianocGpBx9d8FXycz2vmNW3aBDVKHgkBd9Gmapt4RBVEpTwnehujsiUBBehUiLvnEHs7VFstCC 或者使用 PayPal： https://www.paypal.me/francescodisales 如何运行 首先，在您的 Windows 系统上检查执行策略： Get-ExectionPolicy 如果显示为...

Intelbras WIN 300/WRN 342 - Credentials Disclosure

Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code. id: CVE-2021-3017 info: name: Intelbras WIN 300/WRN 342 - Credentials Disclosure author: pikpikcu severity: high description:...

evillimiter-ng

Evil Limiter Next Generation Software-blue Una herramienta para monitorear, analizar y limitar el ancho de banda subida/bajada de los dispositivos en tu red local sin acceso físico ni administrativo. evillimiter-ng emplea ARP spoofing y traffic shaping para limitar el ancho de banda de los hosts ...

TransparentTorProxy

A Linux CLI tool that transparently routes all system traffic through the Tor network using nftables. Features • Requirements • Installation • Usage • How It Works • Verification • Contribute No per-application setup needed - just sudo ttp start and every connection goes through Tor. !CAUTION TTP...

CVE-2026-106242

A flaw was found in the Omnibox address bar component of Google Chrome. A remote attacker leveraging social engineering techniques could exploit this flaw by transmitting crafted network traffic. Successful exploitation results in information disclosure, potentially exposing sensitive user data...

CVE-2026-106243

An incomplete cleanup flaw was found in the Proxy Auth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533426590...

Linux Distros Unpatched Vulnerability : CVE-2026-106409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer...

Linux Distros Unpatched Vulnerability : CVE-2026-106361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineeri...

Linux Distros Unpatched Vulnerability : CVE-2026-106570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can...

PT-2026-107485

MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...