Memcrashed-DDoS-Exploit

MEMCRASHED DDOS エクスプロイトツール 著者: @037 このツールを使用すると、Shodan.io から取得した Memcached サーバーに偽装された UDP パケットを送信できます。 前提条件 必要なのは Python 3.x がインストールされていることだけです。 root@kitploit: apt-get install python3 Scapy と Shodan モジュールがインストールされている必要もあります。 root@kitploit: pip install scapy root@kitploit: pip install shodan Shoda...

CVE-2013-5211

CVE-2013-5211 PoC 网络时间协议守护进程（ntpd）monlist 命令启用导致的拒绝服务漏洞 该 Python 脚本用于检测 CVE-2013-5211，这是 NTP（网络时间协议）服务器中发现的一个漏洞。利用 ntpd monlist 命令，此漏洞可能允许攻击者向服务器发送一系列 UDP 数据包，从而消耗服务器资源。 该脚本向用户指定的 NTP 服务器发送一个 UDP 数据包，并等待服务器的响应。如果服务器响应，脚本则表明该服务器存在 CVE-2013-5211 漏洞。否则，表明该服务器不存在此漏洞。 root@kitploit: python3...

CUPS-CVE-2024-47176

CVE-2024-47176 脆弱性スキャナー for CUPS CUPS（Common Unix Printing System） を実行しているシステムに対して CVE-2024-47176 の脆弱性をスキャンするシンプルなツールです。この脆弱性は、ポート631上の Internet Printing Protocol IPP を通じてリモートコード実行（RCE）を引き起こす可能性があります。 機能 自動スキャン : 脆弱なCUPSインスタンスを検出するために、細工されたUDPパケットを送信します。 マルチスレッドスキャン : 複数のIPアドレスを同時に効率的にスキャンします。...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In the net module, there is a issue where packets with the type UFO are dropped in the udprcvSegment function. When sending a packet with the virtionethdr structure to a tun device, if the gsotype field in the virtionethdr...

Astra Linux – Vulnerability in Corosync

A flaw was discovered in Corosync. There is an integer overflow vulnerability in Corosync’s join message sanity validation mechanism, which allows a remote, unauthenticated attacker to send crafted User Datagram Protocol UDP packets. This can cause the service to crash, resulting in a denial of...

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-53151

CVE-2026-53151 concerns the Linux kernel AF_RXRPC subsystem, where legacy parsing of the SACK table could trigger an invalid buffer access when processing fragmented UDP packets. The fix updates rxrpc_input_soft_acks() and rxrpc_input_ack() logic so that SACK contents are not copied into a flat b...

AZL-89519 CVE-2026-3238 affecting package samba 4.18.3-2

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...

CVE-2026-3238 Samba: denial of service against ad dc wins server

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...

Red Hat Enterprise Linux 10 异常处理不当漏洞

Samba is an open-source suite of standard Windows interoperability programs for Linux and Unix systems. Samba has a code vulnerability that stems from the WINS protocol handler, which fails to properly validate incoming packets when operating as an Active Directory domain controller. This allows...

RLSA-2026:19043 Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Security Fixes: corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer overflow in join message...

corosync security update

An update is available for corosync. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The corosync packages provide the Corosync Cluster Engine and C APIs for...

RockyLinux 9 : corosync (RLSA-2026:19200)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19200 advisory. corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer...

CVE-2026-46133

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

RLSA-2026:19200 Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Security Fixes: corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer overflow in join message...

CVE-2026-45859 netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: do shared-unconfirmed check before segmentation Ulrich reports a regression with nfqueue: If an application did not set the 'FGSO' capability flag and a gso packet with an unconfirmed nfconn entry is...

Moderate: Red Hat Security Advisory: corosync security update

An update for corosync is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

ALSA-2026:19043 Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for AlmaLinux cluster software. Security Fixes: corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer overflow in join message...

Unity Linux 20.1060e / 20.1070e Security Update: nginx (UTSA-2026-017548)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017548 advisory. A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrit...

CVE-2026-43284

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSGSPLICEPAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFLSHAREDFRAG after skbsplicefromiter, so later paths that may modify packet data ca...