746 matches found
CVE-2020-0796
CVE-2020-0796 Windows SMBv3 LPE Exploit Authors Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso References https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796 https://www.synacktiv.com/posts/exploit/im-smbghost-daba-dee-daba-da.html...
ridrelay
RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...
CVE-2025-24071-POC
sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...
The vulnerability of the `fs/smb/server/smb2pdu.c` component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the fs/smb/server/smb2pdu.c component in the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the `fs/smb/server/smb2pdu.c` component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the fs/smb/server/smb2pdu.c component in the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability in the `fs/smb/server/transport_tcp.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the fs/smb/server/transporttcp.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the `fs/smb/server/server.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the fs/smb/server/server.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-68099
A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An integer overflow vulnerability exists when processing Access Control Lists ACLs. This flaw can lead to a malformed ACL, which, when re-parsed by clients or ksmbd itself, may trigger out-of-bounds reads. Thi...
CVE-2026-62800
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...
CVE-2026-62790
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...
EUVD-2026-56669
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...
EUVD-2026-56666
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...
Windows SMBv3 Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...
PT-2026-70549
Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...
PT-2026-70541
Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...
CVE-2026-68083
A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An authenticated client could exploit a path resolution error, specifically in the ksmbdvfskernpathcreate function. This vulnerability allows a client to use ".." components in a path to escape the intended...
AZL-95225 CVE-2026-68083 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbdvfskernpathcreate The SMB2 open lookup is rooted at the share with LOOKUPBENEATH, but the create/mkdir/hardlink sink is not: ksmbdvfskernpathcreate builds an absolute path with converttounixname...
The vulnerability of the smb2_calc_max_out_buf_len() function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the smb2calcmaxoutbuflen function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system is related to incorrect calculation of buffer size during packet processing. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerabilities of the functions set_posix_acl_entries_dacl() and set_ntacl_dacl() in the fs/smb/server/smbacl.c module support SMB server functionality in Linux operating systems. These vulnerabilities allow attackers to cause service failures.
The vulnerabilities of the functions setposixaclentriesdacl and setntacldacl in the fs/smb/server/smbacl.c module are related to integer overflows. Exploiting these vulnerabilities could allow an attacker to cause a service failure...
SUSE CVE-2026-64578
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...