Lucene search
+L

376 matches found

Kitploit
Kitploit
•added 2026/10/08 3:09 p.m.•14 views

Etern-blue-Windows-7-Checker

Eternalblue SMB1 Windows7/10 checker Updated and now detects Windows 7 and as well as old version Windows 10 that supports SMB 1. I only implemented smb 1 and any smb 2 server you try this on will return a "not vulnerabile". I researched on how the structure of a SMB1 packet and how to constructe...

9.3CVSS7.8AI score0.93307EPSS
SaveExploits50References1
Kitploit
Kitploit
•added 2026/10/08 7:58 a.m.•35 views

CVE-2020-1301

CVE-2020-1301 POC exploit for SMBLost vulnerability CVE-2020-1301 Affected version Refer here: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1301 Steps to reproduce Make sure SMB/CIFF service feature is turned on target. SMB1 must be supported by target. Refer here:...

8.8CVSS7.5AI score0.43768EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/10/05 11:32 p.m.•14 views

impostor

Impostor SMB1 server for intercepting NTLMv2 Hashes, written in C. The goal of the project is to implement an SMB1 server as a state machine that correctly accepts and responds to client requests in order to deceive it, leading it to complete an NTLM authentication and thus reveal its own NTLMv2...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/10/01 3:35 p.m.•13 views

CVE-2026-84543

Proof of concept This proof of concept is expected to kernel-panic and reboot an affected Mac. The affected test builds used during research were macOS Tahoe 26.4 25E246 and macOS 26.5 beta 4 25F5068a. Apple fixed CVE-2026-84543 in macOS Golden Gate 27, Tahoe 26.7, and Sequoia 15.8. Included PoC...

7.5CVSS6.2AI score0.00428EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•9 views

Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2022_7111)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227111 advisory. samba: server memory information leak via SMB1 CVE-2022-32742 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

4.3CVSS6.2AI score0.01224EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2026/10/01 12:00 a.m.•7 views

Rocky Linux 9 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2022_8317)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228317 advisory. samba: server memory information leak via SMB1 CVE-2022-32742 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note th...

4.3CVSS6.2AI score0.01224EPSS
SaveExploits0References25
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•7 views

CentOS Linux 7 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS7:CLSA-2026:1778604245)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778604245 advisory. - A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the...

4.3CVSS6.2AI score0.01224EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•6 views

CentOS Linux 7 [TuxCare] Security Update: ctdb / ctdb-tests / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS7:CLSA-2026:1780064574)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1780064574 advisory. - All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an...

2.5CVSS6AI score0.00376EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2026/09/28 11:44 p.m.•7 views

SUSE CVE-2026-93787

In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifsfilldir cifsfilldir copies the entry name out of an SMB1 TRANS2FINDFIRST / FINDNEXT response using a length de.namelen supplied by the server. The kmalloc'd SMB...

8.1CVSS6.3AI score0.00344EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 11:17 a.m.•8 views

DEBIAN-CVE-2026-97565

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

5.9AI score0.00198EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/25 11:17 a.m.•7 views

AZL-104462 CVE-2026-97565 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

5.8AI score0.00198EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•12 views

CVE-2026-97565

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

0.00198EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/25 11:17 a.m.•6 views

AZL-104279 CVE-2026-97563 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSize and the caller's count, but never validates DataOffset. The copy...

6.1AI score0.00189EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•8 views

CVE-2026-97563

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSize and the caller's count, but never validates DataOffset. The copy...

0.00189EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/25 11:17 a.m.•7 views

UBUNTU-CVE-2026-97565

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

5.9AI score0.00198EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/25 11:17 a.m.•6 views

UBUNTU-CVE-2026-97563

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead The SMB1 synchronous read helper CIFSSMBRead validates the server's DataLength against CIFSMaxBufSize and the caller's count, but never validates DataOffset. The copy...

6.1AI score0.00189EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 10:21 a.m.•7 views

CVE-2026-97565 smb: client: reject short READ responses in CIFSSMBRead()

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

5.8AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/25 10:21 a.m.•25 views

CVE-2026-97565 smb: client: reject short READ responses in CIFSSMBRead()

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

0.00198EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/25 10:21 a.m.•18 views

CVE-2026-97565

The Linux kernel contains a vulnerability in the CIFSSMBRead() function where it fails to verify that a complete READ_RSP has been received from a server. Specifically, the code dereferences DataLengthHigh , DataLength , and DataOffset without ensuring the response length is at least read_rsp_siz...

5.8AI score0.00198EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/25 10:21 a.m.•10 views

EUVD-2026-86873

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

5.8AI score0.00198EPSS
SaveExploits0References3
Rows per page
Query Builder