CVE-2018-10933-POC

CVE-2018-10933-POC bypass do libSSH Uma vulnerabilidade foi encontrada na máquina de estado do lado do servidor do libssh antes das versões 0.7.6 e 0.8.4 É um POC simples Aqui no código, substitua e conforme necessário...

CVE-2018-10933

إثبات المفهوم لـ CVE-2018-10933 تم العثور على ثغرة أمنية في آلة الحالة الخاصة بالخادم في libssh قبل الإصدارين 0.7.6 و0.8.4. يمكن للعميل الخبيث إنشاء قنوات دون إجراء المصادقة أولاً، مما يؤدي إلى وصول غير مصرح به. الاستخدام : root@kitploit: python3 libssh.py -s SERVERADD -u USERNAME -c COMMMANDTOEX...

netzob

Netzob : Engenharia Reversa de Protocolos, Modelagem e Fuzzing .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 Veja a documentação completa aqui: https://netzob.github.io/netzob/ Sobre o Netzob Netzob é uma ferramenta de...

SCTT-2026-33-0004-FortiCloud-SSO-Identity-Singularity

SCTT-2026-33-0004: تفرد هوية FortiCloud SSO هذا هو التنفيذ الكامل لمتجه SCTT-0004. 📡 التحليل التقني بينما يركز التخفيف الذي أصدرته Fortinet في 27 يناير 2026 لثغرة CVE-2026-24858 على حظر حسابات محددة مثل [email protected]، فإنه يفشل في معالجة الثغرة الزمنية لآلة حالة SAML. من خلال استخدام...

CVE-2026-20127-Exploit-Extension

Краткое описание CVE-2026-20127 Defensive Companion — это флагманское браузерное расширение корпоративного класса, предназначенное для упреждающего анализа угроз и защитной аналитики. Инструмент объединяет авторитетные технические исследования уязвимости обхода аутентификации в контроллере Cisco...

raider

Liens rapides Site web. Page OWASP. Documentation. Installation. FAQ. Pour commencer. Architecture. Discussions. Problèmes. Twitter. Fediverse. Qu'est-ce que Raider OWASP Raider a été développé dans le but d'améliorer les tests d'authentification web. Aujourd'hui, il a évolué et peut être utilisé...

sparkplugFuzzer

Sparkplug B MQTT Security Fuzzer Инструмент для всесторонней оценки безопасности протокольных реализаций Sparkplug B MQTT. Фаззер систематически тестирует все поля протокола для всех 9 типов сообщений, обнаруживает активные устройства в сети и создает подробные журналы для анализа. Ответственное...

Libssh-server-CVE-2018-10933

libssh Authentifizierungs-Bypass-SchwachstelleCVE-2018-10933 Chinesische Version libssh ist eine plattformübergreifende C-Bibliothek, die das SSHv2-Protokoll auf Client- und Serverseite implementiert. In der serverseitigen Zustandsmaschine von libssh wurde eine Logikschwachstelle gefunden. Der...

pulsar

PULSAR Protocol Learning, Simulation and Stateful Fuzzer Pulsar is a network fuzzer with automatic protocol learning and simulation capabilites. The tool allows to model a protocol through machine learning techniques, such as clustering, and Markov models. These models can be used to simulate...

dtls-fuzzer

dtls-fuzzer è uno strumento Java che esegue il fuzzing a livello di protocollo dello stato di server DTLS. Più concretamente, supporta le seguenti funzionalità: 1. dato un alfabeto, può generare automaticamente un modello di un'implementazione locale di un server DTLS; 2. dato un test sequenza di...

CVE-2018-10933

CVE-2018-10933 Una vulnerabilità è stata trovata nella macchina a stati lato server di libssh prima delle versioni 0.7.6 e 0.8.4. Un client malintenzionato potrebbe creare canali senza prima eseguire l'autenticazione, ottenendo accesso non autorizzato. ALCUNI DETTAGLI Il problema deriva dal modo ...

Linux Distros Unpatched Vulnerability : CVE-2026-72021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: use parsed transport offset in SCTP state lookup setsctpstate reads the SCTP chunk header again in order to drive the IPVS SCTP state table. For IPv6 it...

CVE-2026-72124

A flaw was found in the Linux kernel's Controller Area Network CAN ISO-TP transport protocol module. A race condition in the transmit TX state machine allows for unsynchronized state transitions. This can lead to a situation where a frame or timer callback operates on an outdated state, resulting...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down context entry CVE-2026-45944 In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmappurgelock in shrinker CVE-2026-46093 In the...

CVE-2026-72141

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next...

CVE-2026-72124

In the Linux kernel, the following vulnerability has been resolved: can: isotp: serialize TX state transitions under so-rxlock The TX state machine so-tx.state is driven from three contexts: sendmsg claiming and progressing a transfer, the RX path consuming Flow Control/echo frames, and two...

CVE-2026-72021

In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state lookup setsctpstate reads the SCTP chunk header again in order to drive the IPVS SCTP state table. For IPv6 it computes the offset with sizeofstruct ipv6hdr, while the surrounding...

CVE-2026-72021

In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state lookup setsctpstate reads the SCTP chunk header again in order to drive the IPVS SCTP state table. For IPv6 it computes the offset with sizeofstruct ipv6hdr, while the surrounding...

UBUNTU-CVE-2026-72141

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next...

CVE-2026-72141

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 IRQ SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the interrupt-driven block-read state machine rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next...