CVE-2020-1350

CVE-2020-1350 CVE-2020-1350 Proof-of-Concept Environment Setup 1. Download Windows Server 2016 2. Download a Linux box a secondary box to run this script 3. Install Active Directory/DNS on Windows Server 2016 let's say you named your legitimate domain 33y0re.com 4. Have NO DNS records on the...

CVE-2019-19781

CVE-2019-19781 CVE-2019-19781 Module for Router Scan Project How To Use prepare root@kitploit: pip3 install ipcalc,requests usage root@kitploit: python3 scanner.py Copyright some part of this repository that send tcp response is partly forked from trustedsec/cve-2019-19781 with some changes for...

CVE-2018-13379

CVE-2018-13379 CVE-2018-13379 Module for Router Scan Project How To Use prepare root@kitploit: pip3 install time,threading,ipcalc,requests usage root@kitploit: python3 exp.py -f list.txt Copyright some part of this repository that send tcp response is partly forked from milo2012/CVE-2018-13379 wi...

OESA-2025-2720 python-kdcproxy security update

This package contains a Python WSGI module for proxying KDC requests over HTTP by following the MS-KKDCP protocol. It aims to be simple to deploy, with minimal configuration. Security Fixes: If kdcproxy receives a request for a realm which does not have server addresses defined in its...

python-kdcproxy: Remote DoS via unbounded TCP upstream buffering

If an attacker causes kdcproxy to connect to an attacker-controlled KDC server e.g. through server-side request forgery, they can exploit the fact that kdcproxy does not enforce bounds on TCP response length to conduct a denial-of-service attack. While receiving the KDC's response, kdcproxy copie...

MGASA-2023-0270 Updated glibc packages fix security and other bugs

getaddrinfo: Fix use after free in getcanonname CVE-2023-4806 Stack read overflow with large TCP responses in no-aaaa mode CVE-2023-4527 elf: Introduce to dlcallfini elf: Do not run constructors for proxy objects elf: Always call destructors in reverse constructor order BZ 30785 elf: Remove unuse...