GO-RPCBOMB

Description: CVE-2017-8779 rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service memory consumption with ...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

CVE-2012-5960-PoC

CVE-2012-5960-PoC CVE-2012-5960, CVE-2012-5959 Proof of Concept 隨手記錄一下最近玩的東西。 root@kitploit: !/usr/bin/python2 -- coding: utf-8 -- Usage: python2 libupnpDoSPoC.py import socket TARGET = 'TARGETIP' ''' normaltraffic = \ 'M-SEARCH HTTP/1.1\r\n' \ 'HOST:239.255.255.250:1900\r\n' \ 'MX:3\r\n' ...

Minimalistic-offensive-security-tools

Minimalistic TCP and UDP port scanners port-scan-tcp.ps1 | port-scan-udp.ps1 A simple yet powerful TCP and UDP port scanners: Detection of open, closed and filtered ports both TCP and UDP Ability to scan a single host, network range or a list of hosts in a file Adjustable timeout values for...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit Module This module sends a specially crafted packet to Port 50000/UDP could cause a denial of service of the...

CVE-2020-0609

CVE-2020-609-POC Запуск PoC против RDG-сервера с открытым UDP на порту 3391 вызовет сбой экземпляра RDG. Спасибо @Ollypwn за участие в разработке...

CVE-2021-36630

CVE-2021-36630 The SmartZone series devices of Ruckus have security risks. After notifying the manufacturer, they actively organized technical personnel to conduct investigations. During this period, we also provided security suggestions and verification methods many times. On July 19, the compan...

Moderate: Red Hat Security Advisory: unbound security update

An update for unbound is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RHEL 8 : unbound (RHSA-2026:69120)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69120 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: DNS cache poisoning via...

Project-CVE-2026-50751

CVE-2026-50751 IKEv1 보안 테스트 설명 이 Python 스크립트는 Check Point IKEv1 VPN 인증 우회 취약점인 CVE-2026-50751을 대상으로 하는 공격적 보안 테스트 프레임워크입니다. 기능 UDP 포트 500에서 IKEv1 VPN 서비스를 위해 IP 주소 스캔 Check Point VPN 게이트웨이 식별 시도 인증 우회 테스트를 주장하는 조작된 IKEv1 패킷 전송 내부 네트워크 프로빙 기능 포함 리버스 셸 리스너 및 페이로드 생성 기능 포함 중요 참고 사항 이 스크립트는 확인된 신뢰할 수...

CVE-2026-90110

In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison using SipHash The inetpeer rate limiting system stores peer entries in a Red-Black tree keyed deterministically on the remote IP address. Because tree lookups walk the RB-tree using...

RockyLinux 9 : unbound (RLSA-2026:68292)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:68292 advisory. unbound: Unbound: DNS cache poisoning via UDP source port predictability CVE-2026-50252 Tenable has extracted the preceding description block directly from the...

Moderate: Red Hat Security Advisory: unbound security update

An update for unbound is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2024-47176-Scanner

Quick Start Example usage: python3 cupsscanner.py --targets 10.0.0.0/24 --callback 10.0.0.1:1337 CVE-2024-47176 Vulnerability Scanner cups-browsed What is CUPS And Why Does It Matter? CUPS Common Unix Printing System is an open-source framework for managing and controlling printers on UNIX and...

Astra Linux – Vulnerability in Linux, Linux 5.10

A flaw in the processing of received ICMP errors such as ICMP fragments and ICMP redirections within the Linux kernel’s functionality was identified. This flaw allows an off-path remote user to quickly scan open UDP ports. This vulnerability enables a remote user to bypass the UDP source port...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: SCTP: Added mutual exclusion in procsctpdoudpport. We must serialize calls to sctpudpsockstop and sctpudpsockstart, or risk a crash, as syzbot reported: Oops: General protection fault, likely due to a non-canonical address...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udpport: avoid using current-nsproxy As mentioned in a previous commit of this series, using the net structure via current is not recommended for various reasons: - Inconsistency: obtaining information from the...

CVE-2026-74233

Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink WE5926-ECQP firmware 20.0516, Zbtlink WF3526-P firmware 19.051, CTN720-W1, LF-1541, and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 contain...

CVE-2026-50252

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies depend on the source port while their outcome is revealed this secrecy is undermined...

CVE-2026-48045

Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.12, AsyncListener.handlequeryordefer retained every truncated TC-bit incoming query, each up to MAXMSGABSOLUTE = 8966 bytes, in self.deferredaddr and armed a per-address timer in self.timersaddr without...