CVE-2024-27686

MikroTik RouterOS 拒绝服务漏洞 📌 描述 本文档描述了在特定版本的 MikroTik RouterOS 中发现的 拒绝服务（DoS）漏洞 。 该漏洞源于对特制 SMB 请求的处理不足 。远程攻击者可通过向目标服务器发送特制请求来利用此问题。 ✅ 成功利用 该漏洞可能导致受影响系统崩溃或无响应 。 🎯 受影响产品 产品| 受影响版本 ---|--- MikroTik RouterOS| 6.40.5 至 6.44 MikroTik RouterOS| 6.48.1 至 6.49.10 💥 影响 拒绝服务（DoS） 远程攻击者可导致易受攻击的 MikroTik Router...

CVE-2007-2447-Exploit

CVE-2007-2447 漏洞利用工具 本仓库包含一个针对 Samba smbd 3.0.20 CVE-2007-2447 的漏洞利用工具，允许通过精心构造的 SMB 请求远程执行命令。 先决条件 该漏洞利用工具需要 Python 3 和少量依赖项。建议在运行前设置一个虚拟环境。 设置虚拟环境 1. 克隆仓库 ： git clone https://github.com/your-repo/CVE-2007-2447.git cd CVE-2007-2447 2. 创建 Python 虚拟环境 ： python3 -m venv smbenv source...

CVE-2026-57211

RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbitmgmtwmstatic can pass URL-encoded backslashes to erlprimloader:readfileinfo before path validation when multiple management extension plugins are enabled,...

PT-2026-57296

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6 Description On Windows, the RabbitMQ management plugin static file handler rabbit mgmt wm static can pass URL-encoded backslashes to the erl prim loader:read file info function...

CVE-2026-57211: Absolute Path Traversal

RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the RabbitMQ management plugin static file handler rabbitmgmtwmstatic can pass URL-encoded backslashes to erlprimloader:readfileinfo before path validation when multiple management extension plugins are enabled,...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from ksmbd’s handling of composite requests like QUERYDIRECTORY + QUERYINFOFILEALLINFORMATION. This...

EUVD-2020-15601

Malware in sbrugna...

EUVD-2019-5661

Malware in sbrugna...

Exploit for CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability 📌 Descri...

CVE-2020-22844

A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service DOS via crafted SMB requests...

CVE-2019-14476

AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery SSRF vulnerability in the NetCrunch server. Every user can trick the server into performing SMB requests to other systems...

CVE-2000-1227

Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service unavailable connections by sending multiple SMB SMBnegprots requests but not reading the response that is sent back...

DEBIAN-CVE-2024-53186

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in SMB request handling A race condition exists between SMB request handling in ksmbdconnhandlerloop and the freeing of ksmbdconn in the workqueue handler handleksmbdwork. This leads to a UAF. - KASAN:...

CVE-2020-22844

A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service DOS via crafted SMB requests...

Buffer overflow

A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service DOS via crafted SMB requests...

CVE-2020-22844

A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service DOS via crafted SMB requests...

CVE-2020-22844

Affects Mikrotik RouterOS (version 6.47). The vulnerability is a buffer overflow in handling SMB requests, enabling unauthenticated attackers to trigger denial of service. The available sources consistently state the issue as a DoS caused by crafted SMB traffic. No concrete remediation details (p...

CVE-2020-22844: Missing Release of Memory after Effective Lifetime

A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service DOS via crafted SMB requests...

CVE-2019-14476

AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery SSRF vulnerability in the NetCrunch server. Every user can trick the server into performing SMB requests to other systems...

Server side request forgery (ssrf)

AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery SSRF vulnerability in the NetCrunch server. Every user can trick the server into performing SMB requests to other systems...