17 matches found
impacket
Impacket 版权所有 Fortra, LLC 及其附属公司。保留所有权利。 Impacket 最初由 SecureAuth 创建,现在由 Fortra 的 Core Security 维护。 Impacket 是一个 Python 类集合,用于处理网络协议。Impacket 专注于提供对数据包的低级编程访问,并且对于某些协议(例如 SMB1-3 和 MSRPC),它提供了协议实现本身。可以从头开始构建数据包,也可以从原始数据解析,面向对象的 API 使得处理深层协议层次结构变得简单。该库提供了一组工具,作为可以在该库上下文中完成的操作示例。 支持哪些协议? Ethernet、Lin...
o3_finds_cve-2025-37899
This is the artefact repository associated with my blog post How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation. See that post for details...
o3_finds_cve-2025-37899
basado en Cómo usé o3 para encontrar CVE-2025-37899, una vulnerabilidad de día cero remota en la implementación SMB del kernel de Linux vulnerabilidad objetivo vulnerabilidad de ollama CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34...
EUVD-2015-5837
Malware in sbrugna...
EUVD-2017-3993
Malware in sbrugna...
PT-2025-22161
Name of the Vulnerable Software and Affected Versions: Linux kernel Description: A use-after-free vulnerability exists in the ksmbd module of the Linux kernel, specifically in the smb2 sess setup function. This flaw could allow a remote attacker to cause a denial of service. The vulnerability was...
Moderate: Red Hat Security Advisory: samba security update
An update for samba is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
CVE-2015-5891
CVE-2015-5891 affects the SMB implementation in the Apple OS X kernel prior to 10.11. It allows local users to gain privileges or cause a denial of service via memory corruption (unspecified vectors). Base score 7.2 (HIGH). No exploitation status or detailed fix provided in the connected documents.
Null pointer dereference
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allo...
Authentication flaw
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain...
Race condition
Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 Negotiate packet, aka "SMB...
Buffer overflow
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to...
CVE-2010-0020
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to...
CVE-2010-0231
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain...
CVE-2010-0021
Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 Negotiate packet, aka "SMB...
CVE-2010-0021
Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 Negotiate packet, aka "SMB...
MS02-045: Unchecked buffer in Network Share Provider (326830)
Due to a flaw in Microsoft's SMB implementation, the remote host is vulnerable to a denial of service attack. By sending a specially crafted packet request, an attacker could launch a denial of service, causing the affected host to crash. Note that this vulnerability is not exploitable without...