Lucene search
+L

29 matches found

Kitploit
Kitploit
•added 2026/09/26 9:47 a.m.•5 views

midonescanner-android

MidONe Scanner اسکنر حرفه‌ای آی‌پی تمیز CDN · CLOUDFLARE · DNS ⬇️ دانلود APK · 🖥️ دانلود Windows · 📣 کانال تلگرام 🔍 چرا MidONe Scanner؟ بیشتر ابزارهای اسکن IP فقط یک ping ساده می‌زنند — عددی که هیچ ربطی به سرعت واقعی اتصال ندارد. MidONe Scanner متفاوت است: داده واقعی دانلود می‌کند. سرعتی که اپ نشان...

5.9AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/08/21 1:06 p.m.•11 views

CVE-2026-73212

A flaw was found in Coturn. An authenticated client using the RFC 6062 TCP CONNECT relay path can bypass intended IPv4 denied-peer-ip range restrictions due to improper canonicalization of IPv4-compatible, 6to4, and NAT64 address forms. This vulnerability can lead to Server-Side Request Forgery...

7.7CVSS6.2AI score0.00496EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2026/08/11 5:31 p.m.•39 views

CVE-2026-73212 coturn peer-IP ACL canonicalization & scope bypass on the RFC 6062 TCP CONNECT relay path → internal-network SSRF and proven internal root RCE

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, goodpeeraddr in src/server/nsturnserver.c uses ioaaddrinrange in src/client/nsturnioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated RFC 6062 T...

5.8CVSS0.00496EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/11 5:31 p.m.•12 views

EUVD-2026-56789

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, goodpeeraddr in src/server/nsturnserver.c uses ioaaddrinrange in src/client/nsturnioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated RFC 6062 T...

5.8CVSS5.3AI score0.00496EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•0 views

CVE-2026-73212: Improper Access Control

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.1, goodpeeraddr in src/server/nsturnserver.c uses ioaaddrinrange in src/client/nsturnioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms, allowing an authenticated RFC 6062 T...

5.8CVSS5.8AI score0.00496EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•22 views

PT-2026-70799

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.13.1 Description The good peer addr function in src/server/ns turn server.c utilizes ioa addr in range in src/client/ns turn ioaddr.c without canonicalizing IPv4-compatible, 6to4, and 64:ff9b::/96 NAT64 address forms...

5.8CVSS5.9AI score0.00496EPSS
SaveExploits0References32
SUSE CVE
SUSE CVE
•added 2026/07/25 3:58 p.m.•14 views

SUSE CVE-2026-64459

In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcpaodestroysock Commit 51e547e8c89c "tcp: Free TCP-AO/TCP-MD5 info/keys without RCU" removed the callrcu callback from tcpaodestroysock, arguing that "the destruction of info/keys is delayed unti...

4.7CVSS5.8AI score0.00649EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/25 8:51 a.m.•18 views

EUVD-2026-48803

In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcpaodestroysock Commit 51e547e8c89c "tcp: Free TCP-AO/TCP-MD5 info/keys without RCU" removed the callrcu callback from tcpaodestroysock, arguing that "the destruction of info/keys is delayed unti...

5.8AI score0.00649EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/25 12:00 a.m.•16 views

PT-2026-64680

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the TCP implementation where the RCU Read-Copy-Update grace period was incorrectly removed from the tcp ao destroy sock function. This occurs specifically during the t...

9.8CVSS5.4AI score0.00649EPSS
SaveExploits0
OSV
OSV
•added 2026/06/16 7:09 p.m.•27 views

GHSA-V8FW-85R8-5M23 Deno: Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checks

Summary Deno's network permission model is designed so that --deny-net rules apply to the resolved IP address of a destination, not just the literal string supplied by the caller. That means --deny-net=127.0.0.1 or --deny-net=127.0.0.0/8 is expected to block any attempt to reach loopback,...

6.5CVSS5.6AI score0.00158EPSS
SaveExploits1References3
AstraLinux
AstraLinux
•added 2026/05/20 5:53 a.m.•7 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mptcp: Prevent BPF from accessing lowat from a subflow socket. Alexei reported the following error: WARNING: CPU: 32, PID: 3276; in net/mptcp/subflow.c:1430; function subflowdataready+0x147/0x1c0. Linked modules: dummy,...

7.8CVSS5.8AI score0.00222EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2002-0116

Malware in sbrugna...

5CVSS6.4AI score0.01632EPSS
SaveExploits0References5
OSV
OSV
•added 2024/10/15 3:42 p.m.•15 views

GO-2024-3199 Go-Landlock in best-effort mode did not restrict TCP bind and connect operations correctly in github.com/landlock-lsm/go-landlock

Go-Landlock in best-effort mode did not restrict TCP bind and connect operations correctly in github.com/landlock-lsm/go-landlock. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing...

7AI score
SaveExploits0References2
OSV
OSV
•added 2024/05/14 3:12 p.m.•6 views

DEBIAN-CVE-2024-27394

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix Use-After-Free in tcpaoconnectinit Since callrcu, which is called in the hlistforeachentryrcu traversal of tcpaoconnectinit, is not part of the RCU read critical section, it is possible that the RCU grace period will pas...

7.8CVSS5.7AI score0.00261EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/05/11 2:34 a.m.•9 views

SUSE CVE-2024-27394

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix Use-After-Free in tcpaoconnectinit Since callrcu, which is called in the hlistforeachentryrcu traversal of tcpaoconnectinit, is not part of the RCU read critical section, it is possible that the RCU grace period will pas...

7.8CVSS6.7AI score0.00261EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/04/23 12:00 a.m.•13 views

PT-2024-3621 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a Use-After-Free vulnerability in the tcp ao connect init function. This vulnerability is caused by a race condition in the RCU API, where the call rcu function...

9.8CVSS6AI score0.01305EPSS
SaveExploits3References719
Oracle linux
Oracle linux
•added 2019/10/02 12:00 a.m.•121 views

Unbreakable Enterprise kernel security update

kernel-uek 3.8.13-118.39.1 - tcp: purge write queue in tcpconnectinit Eric Dumazet Orabug: 30240134 CVE-2019-15239 - cx24116: fix a buffer overflow when checking userspace params Mauro Carvalho Chehab Orabug: 30254282 CVE-2015-9289 - floppy: fix out-of-bounds read in copybuffer Denis Efremov...

7.8CVSS2.9AI score0.00734EPSS
SaveExploits1
zdt
zdt
•added 2008/08/13 12:00 a.m.•37 views

Cisco IOS Connectback shellcode v1.0

Exploit for hardware platform in category shellcode ==================================== Cisco IOS Connectback shellcode v1.0 ==================================== ---------------------------------------------------------------------------------------- Cisco IOS Connectback shellcode v1.0 c 2007 I...

7AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2006/05/06 12:00 a.m.•50 views

bl4ck_awstats_migrate_cmd_inj.py.txt

!/usr/bin/env python http://secunia.com/advisories/19969/ by [email protected] May 5, 2006 - HAPPY CINCO DE MAYO HAPPY BIRTHDAY DAD private plz redsand@jinxy / $ nc -l -p 31337 -v listening on any 31337 ... connect to 65.99.197.147 from blacksecurity.org 65.99.197.147 53377 id uid=81apach...

7.4AI score
SaveExploits0
NVD
NVD
•added 2004/11/23 5:00 a.m.•31 views

CVE-2004-0257

OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service crash by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port...

5CVSS6.7AI score0.02473EPSS
SaveExploits0References8
Rows per page
Query Builder