smbmap

SMBMap SMBMap allows users to enumerate samba share drives across an entire domain. List share drives, drive permissions, share contents, upload/download functionality, file name auto-download pattern matching, and even execute remote commands. This tool was designed with pen testing in mind, and...

CVE-2026-4480

🚨 CVE-2026-4480 - Critical Remote Code Execution in Samba Printing Subsystem Remote Code Execution RCE Samba Print Command Injection Vulnerability "A single print job name should never become a shell command." 📖 Overview CVE-2026-4480 is a critical command injection vulnerability affecting Samba'...

samba-3.0.24-CVE-2007-2447-vunerable-

samba-3.0.24-CVE-2007-2447-vunerable-...

enum4linux

enum4linux A Linux alternative to enum.exe for enumerating data from Windows and Samba hosts. Enum4linux is a tool for enumerating information from Windows and Samba systems. It attempts to offer similar functionality to enum.exe formerly available from www.bindview.com. It is written in Perl and...

noSAMBAnoCRY-CVE-2017-7494

noSAMBAnoCRY CVE-2017-7494 Remote exploit for the SAMBA CVE-2017-7494 vulnerability aka isknowpipename! Details This exploit is divided in 3 parts: Compiles the evilLib in following archs: x8664 , x86, or i686 Finds a writeable share and uploads evilLib to it! Loads evilLib, if everything goes...

CVE-2007-2447

CVE-2007-2447 CVE-2007-2447 - Samba usermap script. https://alien0ne.digitalpress.blog/cve-2007-2447/ Usage: $ python3 script.py rhost - The target address rport - The target port lhost - The listener address lport - The listener port Installation: This exploit requires Python 3.7 or higher sudo...

exploit-CVE-2017-7494

SambaCry RCE exploit for Samba 4.5.9 Samba is a free software re-implementation of the SMB/CIFS networking protocol. Samba provides file and print services for various Microsoft Windows clients and can integrate with a Microsoft Windows Server domain, either as a Domain Controller DC or as a doma...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Samba Print Job Name Command Injection Overview CVE-2026-4480 is a command injection vulnerability affecting certain Samba printing configurations that use external print commands. The vulnerability exists because Samba inserts user-controlled print job metadata...

CVE-2007-2447

CVE-2007-2447 - username map script "The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the 1 SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows...

ROS-20261103-73-0002

The vulnerability in the NTFS reparse points mechanism of the Samba software is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to modify arbitrary files...

Photon OS 5.0: Samba PHSA-2025-5.0-90-0648

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-90-0648. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Samba PHSA-2026-4.0-1082

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1082. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ROS-20261102-73-0008

The Samba vulnerability stems from a failure to sanitize special elements in LDAP requests. Exploitation of this vulnerability may enable a remote attacker to gain unauthorized access to protected information...

Photon OS 5.0: Samba PHSA-2026-5.0-90-1030

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1030. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

ROS-20261102-73-0016

A vulnerability in Samba related to insufficient data authentication. Exploitation of this vulnerability could allow an attacker to escalate their privileges...

Photon OS 5.0: Samba PHSA-2026-5.0-90-1033

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-1033. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

cve-2019-6453-poc

CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument list, an attacker is...

trans2open-CVE-2003-0201

Samba versions 2.2.0 to 2.2.8 This exploits the buffer overflow found in Samba versions 2.2.0 to 2.2.8. This particular module is capable of exploiting the flaw on x86 Linux systems that do not have the noexec stack option set. NOTE: Some older versions of RedHat do not seem to be vulnerable sinc...

cve-2017-7494

Basic Setup Install Samba version 4.5.9 https://download.samba.org/pub/samba/stable/samba-4.5.9.tar.gz https://wiki.samba.org/index.php/BuildSambafromSource Get patched version of Impacket pip install -r requirements.txt Usage 1. Start Samba server in interactive mode + debug print sudo...

CVE-2007-2447

CVE-2007-2447 CVE-2007-2447 - Samba usermap script. https://amriunix.com/post/cve-2007-2447-samba-usermap-script/ Usage: $ python usermapscript.py RHOST -- The target address RPORT -- The target port TCP : 139 LHOST -- The listen address LPORT -- The listen port Installation sudo apt install...