tsh-sctp

Tiny SHell - Un backdoor UNIX open-source Avant de compiler Tiny SHell 1. Tout d'abord, vous devez configurer votre clé secrète, située dans tsh.h ; la clé peut être de n'importe quelle longueur utilisez au moins 12 caractères pour une meilleure sécurité. 2. Il est conseillé de changer SERVERPORT...

tsh-sctp

Tiny SHell - An open-source UNIX backdoor Before compiling Tiny SHell 1. First of all, you should setup your secret key, which is located in tsh.h; the key can be of any length use at least 12 characters for better security. 2. It is advised to change SERVERPORT, the port on which the server will...

CVE-2026-64564

Debian 13 6.12.95 SCTP ASCONF DEL-IP UAF preuve de concept. gcc -O2 -static -o lpe lpedebian.6.12.95.c ./lpe...

CVE-2020-6514

CVE-2020-6514 الاستغلال عند كتابة الاستغلال، قمت في الأصل بتعديل حزم SCTP المرسلة إلى الجهاز المستهدف عن طريق تعديل مصدر WebRTC وإعادة ترجمته. لم يكن هذا عمليًا لمهاجمة التطبيقات مغلقة المصدر، لذا تحولت في النهاية إلى استخدام Frida لربط hook ثنائي الجهاز المهاجم بدلاً من ذلك. تسمح وظيفة الربط في...

M3UAScan

M3UAScan أداة مسح لبروتوكول M3UA لاكتشاف العقد التي تدعم Sigtran M3UA تعني طبقة تكيف المستخدم من المستوى 3 MTP3 كما هو معرف من قبل مجموعة عمل IETF SIGTRAN في RFC 4666 .M3UA يتيح لأجزاء المستخدم من بروتوكول SS7 مثل ISUP و SCCP و TUP العمل عبر IP بدلاً من معدات الهاتف مثل ISDN و PSTN. يُوصى باستخدا...

CVE-2019-8956

CVE-2019-8956 sctp-PoC يجب تثبيت sctp lib gcc sctp-2019-8956-poc.c -o sctp-2019-8956-poc -pthread -lsctp -static...

sctphantom

SCTPhantom — Linux kernel SCTP ASCONF use-after-free tracking site Source for the SCTPhantom patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP ASCONF transport use-after-free in the Linux kernel. Where the facts live Everything about the bug —...

CVE-2026-74586

CVE-2026-74586 — SCTP ASCONF newtransport use-after-free trigger A self-contained, unprivileged PoC for CVE-2026-74586, a use-after-free in the Linux kernel's SCTP ASCONF dynamic address reconfiguration handling. Credit for the bug itself goes to Qing Ming, who reported it upstream; the fix is...

DiagSpill

DiagSpill CVE-2026-74469 Writeup !WARNING Le PoC est fourni uniquement pour aider les défenseurs, les mainteneurs et les équipes de sécurité autorisées à valider les correctifs, les atténuations, les détections et l'exposition sur des systèmes qu'ils possèdent ou qu'ils sont explicitement autoris...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

SUSE SLES15: kernel-livepatch-5_14_21-150400_24_200-default / etc (SUSE-SU-2026:4519-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4519-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.200 fixes various security issues: The following security issues were fixed:...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500375)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500375 advisory. - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40020673 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft As...

Wireshark 1.6.x < 1.6.14 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.14 advisory. - The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.41 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...