CVE-2016-10708

SSH NEWKEYS Flood PoC CVE-2016-10708 Description This proof-of-concept script exploits a vulnerability in OpenSSH versions prior to 7.4 CVE-2016-10708 by sending unexpected SSHMSGNEWKEYS packets which can result in DoS. It can operate in two modes: scan : Connects to one or more SSH servers,...

CVE-2025-27480

CVE-2025-27480 CVE‑2025‑27480 – Remote Code Execution in OpenSSH What the vulnerability is all about OpenSSH version 8.9p1 contains a subtle buffer‑overflow bug that happens when it parses an SSHUSERAUTH packet. A client can send a packet with a very long “user” field, and the data lands in the...

CVE-2025-30216-PoC

PoC for CVE-2025-30216: CryptoLib Heap Overflow Vulnerability Overview CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station...

CVE-2026-98351

A flaw was found in the Linux kernel's virtual Wi-Fi virtwifi driver. This issue can result in a Denial of Service DoS due to an unreleased memory leak. When a simulated wireless link is disconnected, the driver fails to free packet buffers after dropping outgoing network packets. A local user ca...

CVE-2024-47176

CVE-2024-47176 CUPS Common UNIX Printing System is a printing system that primarily uses protocols such as IPP Internet Printing Protocol to manage print jobs and queues. On September 27, 2024, details of a remote code execution in Unix CUPS were disclosed on the internet, with the exploitation...

CVE-2025-48466

CVE-2025-48466 Modbus Packet Injection on Advantech WISE 4060LAN / IoT Gateway for door control. see script: main.py Summary I was able to figure out that it is just very easy to somehow manipulate the Modbus server running on an IoT Gateway for door control on a network. Any remote attacker...

Sapito

Sapito Authors: Sebastian Garcia [email protected], @eldracote, Veronica Valeros [email protected], @verovaleros About Sapito Sapito is a multicast DNS mDNS sniffer and interpreter written in Python. Sapito sniffs packets from a pcap or interface and interprets the findings. This means...

esp32_bluetooth_classic_sniffer

BrakTooth ESP32 BR/EDR Active Sniffer/Injector Simple "Monitor mode" for Bluetooth Classic. Sniff or inject BR/EDR Baseband packets in ESP32 BT connections. This is a reverse engineered active BR/EDR sniffer and ESP32 patching framework, which can be used to explore the Bluetooth BT BR/EDR...

CVE-2022-23884

CVE-2022-23884 There is a network-layer vulnerabilities in the official server of Minecraft: Bedrock Edition aka Bedrock Server,which allow attacker to launch a DoS attack. CVE-2022-23884 Mojang Bedrock Dedicated Server 1.16.0-1.18.12 is affected by an large loop and crash server caused by...

CVE-2026-98233

A flaw was found in the Linux kernel's packet socket implementation. An attacker could cause a Denial of Service DoS by transmitting network packets that fail virtual network header processing. When processing encounters an error, the kernel fails to clear the ownership status of the assigned...

CVE-2026-71884 Packet CTR reports a full success length after the counter is exhausted

In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter space the IV left. In CTR mode the IV and the block counter share one 16-byte block, so an IV of 13 to 15 bytes leaves a counter of only 1 to 3 byte...

EUVD-2026-95586

In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter space the IV left. In CTR mode the IV and the block counter share one 16-byte block, so an IV of 13 to 15 bytes leaves a counter of only 1 to 3 byte...

CVE-2026-71884

In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter space the IV left. In CTR mode the IV and the block counter share one 16-byte block, so an IV of 13 to 15 bytes leaves a counter of only 1 to 3 byte...

CVE-2026-71884

In Bouncy Castle for Java LTS versions before 2.73.13 , a vulnerability exists in the native one-shot CTR packet cipher . The component fails to verify if the requested input length fits the remaining counter space left by an IV of 13 to 15 bytes. This allows the counter to wrap, causing the keys...

CVE-2026-71884 Packet CTR reports a full success length after the counter is exhausted

In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter space the IV left. In CTR mode the IV and the block counter share one 16-byte block, so an IV of 13 to 15 bytes leaves a counter of only 1 to 3 byte...

CVE-2026-98234

A flaw was found in the Linux kernel's Heavy-Hitter Filter HHF network packet scheduler. A local user with network administration privileges, such as within a container or user namespace, can set an excessively large flow limit due to missing upper-bound validation. When the system subsequently...

2024InformationSecurityEngineer

2024InformationSecurityEngineer 2024 Information Security Engineer, 2024InformationSecurityEngineer 2024 Second Half - Information Security Engineer Exam Question Recollection Soft Exam - Exam Date : 2024年11月08日 1. Firewall Packet Capture 14 points 1. Packet length 2 points Answer: 63 2. Is it a...

RLSA-2026:77500 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in...

RLSA-2026:77498 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vsock/vmci: fix UAF when peer resets connection during handshake CVE-2026-64115 kernel: packet: use consistent hardheaderlen in non-ring send paths kernel: packet: use consistent...

dlsw_exploit

DLSW Exploit Cisco DLSw Information Disclosure Vulnerability There is a bug in Cisco's DLSw implementation affecting 12.x and 15.x trains that allows an unuthenticated remote attacker to retrieve the partial contents of packets traversing a Cisco router with DLSw configured and active...