Description of the critical update for Windows Firewall "My Network (subnet) only" scoping in Windows XP Service Pack 2

Description of the critical update for Windows Firewall "My Network subnet only" scoping in Windows XP Service Pack 2 Article ID : 886185 Last Review : December 18, 2004 Revision : 2.0 On this Page SUMMARY SYMPTOMS CAUSE RESOLUTION MORE INFORMATION SUMMARY This article describes Critical Update f...

Multiple Ethernet Driver Frame Padding Information Disclosure (Etherleak)

The remote host uses a network device driver that pads ethernet frames with data which vary from one packet to another, likely taken from kernel memory, system memory allocated to the device driver, or a hardware buffer on its network interface card. Known as 'Etherleak', this information...

CVE-1999-1157

The issue (CVE-1999-1157) affects Tcpip.sys on Windows NT 4.0 before SP4. A remote attacker can cause denial of service by sending an ICMP Subnet Mask Address Request when multiple IP addresses are bound to the same network interface. The vulnerability impact is described as availability partial....

ARPNuke - 80 kb/s kills a whole subnet

Hi ppl, It is time for a new ґnukeґ - ARPNuke. There is an ARP table handling bug in Microsoft Windows protocoll stacks. It seems that the arp handling code uses some inefficient data structure maybe a simple linear table? to manage the ARP entries. Sending a huge amount of ґrandomґ that is rando...

SyGate Backdoor Detection

SyGate engine remote controller seems to be running on this port. It may be used by malicious users that are on the same subnet as this host to reconfigure the remote SyGate engine. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10274; scriptversion "1.24";...

id Software Solaris Quake II 3.133.14 QuakeWorld 2.02.1 Quake 1.93.133.14 - Command Execution

id Software Solaris Quake II 3.133.14 QuakeWorld 2.02.1 Quake 1.93.133.14 - Command Execution // source: https://www.securityfocus.com/bid/90/info The Quake server has a feature where it allows administrators to remotely send commands to the Quake console with a password. However, it is possible ...

CVE-2026-48736: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient

More info at https://symfony.com/cve-2026-48736...