CVE-2026-73443

On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indefinitely. Replayed advertisements can be...

CVE-2020-16898

CVE-2020-16898: “坏邻居” CVSS 评分: 8.8 CVSS 向量: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 概述 10月13日，微软宣布 Windows IPv6 协议栈中存在一个极其严重的漏洞，该漏洞允许攻击者发送特制数据包，从而可能在远程系统上执行任意代码。分享给 MAPP 成员的概念验证代码既极其简单又完全可靠。它会立即导致蓝屏死机（BSOD），但更重要的是，对于那些能够绕过 Windows 10 和 Windows Server 2019...

CVE-2020-16898-Bad-Neighbor

================================================================================= Simple policy to detect CVE-2020-16898: Bad Neighbor Following functionality are provided by the script :: 1 Script checks on heuristic described here:...

privaxy

Privaxy 新一代追踪器和广告屏蔽工具 关于 Privaxy 是一个 MITM HTTPs 代理，位于进行 HTTPs 通信的应用程序（如 Web 浏览器）与 HTTP 服务器（如提供网站的服务器）之间。 通过在两端之间建立双向隧道，Privaxy 能够根据 URL 模式拦截网络请求，并向 HTML 文档注入脚本和样式。 由于在更低层级运行，Privaxy 比基于浏览器插件的拦截器更高效、更简洁。单个 Privaxy 实例可以部署在小型虚拟机、服务器甚至与流量来源相同的计算机上，每秒过滤数千个请求，且仅需极少量内存。 Privaxy 不受浏览器 API 限制，可以处理任何 HTTP...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

CVE-2020-10749

CVE-2020-10749 CVE-2020-10749 PoC Ataques MitM en Kubernetes mediante anuncios de router IPv6 falsos Solo con fines educativos Requisitos Clúster de Kubernetes con la siguiente versión de kubelet kubelet v1.18.0-v1.18.3 kubelet v1.17.0-v1.17.6 kubelet mtu 1450 state UP inet6...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

YZMCMSxss

YZMCMSxss CVE-2018-8078 YZMCMS v3.7最新版xss漏洞 YZMCMS V3.7 Stored XSS 这个xss存在于v3.7新增的广告管理模块，如图所示: This xss exists in v3.7 new advertising management module, as shown in the figure: 我们可以在YzmCMS-V3.7\application\advertisement\controller\adver.class.php第55-70行中找到广告管理编辑功能的具体代码，如图所示： We can find the...

Docker-Container-CVE-2020-13401

Estudio de CVE-2020-13401 Estudio sobre la vulnerabilidad CVE-2020-13401 de contenedores en dockers anteriores a 19.03.11 Los contenedores que se crean con versiones de Docker Engine anteriores a 19.03.11 son vulnerables a recibir y aplicar mensajes RA Router Advertisement / Anuncio de router...

CVE-2026-15893

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

EUVD-2026-77767

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-15893

CVE-2026-15893 affects the Zephyr RTOS IPv6 Neighbor Discovery stack. The function net_if_ipv6_calc_reachable_time() in subsys/net/ip/net_if.c computes a randomized reachable time from base_reachable_time using integer division. When the Reachable Time field of an incoming Router Advertisement is...

CVE-2026-15893 Zephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

CVE-2026-15893 Zephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS

netifipv6calcreachabletime in subsys/net/ip/netif.c derives a randomized ND reachable time from ipv6-basereachabletime as minreachable + sysrand32get % maxreachable - minreachable, where minreachable = base/2 and maxreachable = 3base/2 using integer division. When basereachabletime is 1, both...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: eir: Fixed possible crashes when using eircreateadvdata. eircreateadvdata may attempt to add EIRFLAGS and EIRTXPOWER without checking whether those values are compatible with the structure...

CVE-2026-17255

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements...

CVE-2026-74598

A flaw was found in the Linux kernel's IPv6 networking stack. An off-by-one error in the validation of the Route Information option length RFC 4191 allows a remote attacker to craft a Router Advertisement RA packet. This crafted packet can cause the kernel to read up to 8 bytes beyond the intende...

Astra Linux – Vulnerability in libndp

A vulnerability was discovered in libndp. This flaw allows a local malicious user to trigger a buffer overflow in NetworkManager, by sending a malformed IPv6 router advertisement packet. This issue occurred because libndp did not properly validate the route length information...

Astra Linux – Vulnerability in OpenVSwitch

A flaw was discovered in Open vSwitch, allowing ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may enable a local attacker to create specially crafted packets with a modified or spoofed target IP address field, which can redirect ICMPv6 traffic...

EUVD-2026-64535

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...