272 matches found
pspy
pspy - 无需特权的 Linux 进程窥探 pspy 是一款命令行工具，旨在无需 root 权限即可窥探进程。它允许你查看其他用户运行的命令、cron 作业等，在它们执行时实时观测。非常适合在 CTF 中对 Linux 系统进行枚举。同时也能向你的同事展示为什么在命令行参数中传递密码是个坏主意。 该工具通过扫描 procfs 获取信息。Inotify 监视器被放置在文件系统的选定部分，这些监视器触发扫描以捕捉短时进程。 快速开始 下载 将工具下载到你要检查的 Linux 机器上。先获取二进制文件。在此处下载发布版二进制文件： 32 位大型静态版本：pspy32 下载 64...
dnsrecon
DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...
Dnsrr
DNSrr DNSrr 是一个用 bash 编写的工具，用于枚举 DNS 记录中的所有有价值信息，它使用不同的技术，如 DNS 正向暴力破解 DNS 反向暴力破解 DNS 缓存窥探 DNS 区域传输 从 DNS 服务器获取你能得到的所有信息。 安装 使用 git 安装 root@kitploit: git clone https://github.com/A3h1nt/Dnsrr 开始使用 root@kitploit: ./dnsrr.sh --help 使用 root@kitploit: ------------------- USAGE ------------------ -z :...
CVE-2026-73462
On affected platforms running Arista EOS with IGMP Internet Group Management Protocol snooping configured enabled by default on all VLANs, a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly...
CVE-2026-73462 On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I
On affected platforms running Arista EOS with IGMP Internet Group Management Protocol snooping configured enabled by default on all VLANs, a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly...
CVE-2026-73462
CVE-2026-73462 affects the IGMP snooping agent in Arista EOS . An adjacent, unauthenticated attacker can send malformed packets to trigger an out-of-bounds read (CWE-125) , crashing the agent and causing multicast traffic to flood all ports on the affected VLAN. Repeated exploitation may lead to ...
EUVD-2026-81010
On affected platforms running Arista EOS with IGMP Internet Group Management Protocol snooping configured enabled by default on all VLANs, a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Bridge: mcast: Fixed use-after-free during router port configuration The bridge maintains a global list of ports behind which a multicast router resides. This list is used during forwarding to ensure that multicast packets are...
Security Advisory 0159
Security Advisory 0159 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73462 CVSSv3.1 Base Score: 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 7.1...
EUVD-2026-53444
IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the...
Cisco IOS XE Software for Catalyst 9000 Series Switches DHCP Snooping DoS (cisco-sa-bootp-WuBhNBxA)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resulting in a denial of...
SUSE CVE-2026-64032
In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disables the per-port multicast context on each port and enables...
CVE-2026-64032
In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disables the per-port multicast context on each port and enables...
CVE-2026-64032 bridge: mcast: Fix a possible use-after-free when removing a bridge port
In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disables the per-port multicast context on each port and enables...
CVE-2026-64032 bridge: mcast: Fix a possible use-after-free when removing a bridge port
In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disables the per-port multicast context on each port and enables...
CVE-2026-64032
The CVE-2026-64032 entry documents a Linux kernel use-after-free in bridge multicast snooping when removing a bridge port. The issue occurs when both per-port and per-{port, VLAN} multicast contexts become enabled on a single bridge port due to interactions between per-VLAN multicast snooping and...
EUVD-2026-45605
In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disables the per-port multicast context on each port and enables...
CVE-2026-64032
In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge ports, disables the per-port multicast context on each port and enables...
PT-2026-61349
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bridge component when removing a bridge port. This occurs when both per-port and per-port, VLAN multicast contexts are enabled on a single bridge por...
SUSE CVE-2026-45913
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: always update mdbnentries for vlan contexts syzbot triggered a warning1 about the number of mdb entries in a context. It turned out that there are multiple ways to trigger that warning today some got added...