CVE-2020-16898

CVE-2020-16898: “Vicino Maligno” Punteggio CVSS: 8.8 Vettore CVSS: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Panoramica Il 13 ottobre, Microsoft ha annunciato una vulnerabilità eccezionalmente critica nello stack IPv6 di Windows, che consente a un aggressore di inviare pacchetti...

privaxy

Privaxy Blocco di tracker e pubblicità di nuova generazione Informazioni Privaxy è un proxy MITM HTTPs che si frappone tra applicazioni che comunicano tramite HTTPs, come un browser web, e server HTTP, come quelli che servono siti web. Stabilendo un tunnel bidirezionale tra le due estremità,...

YZMCMSxss

YZMCMSxss CVE-2018-8078 YZMCMS v3.7最新版xss漏洞 YZMCMS V3.7 Stored XSS questo xss è presente nel modulo di gestione pubblicitaria aggiunto in v3.7, come mostrato in figura: Possiamo trovare il codice specifico della funzione di modifica della gestione pubblicitaria in...

CVE-2020-16898-Bad-Neighbor

Einfache Policy zur Erkennung von CVE-2020-16898: Bad Neighbor Die folgenden Funktionen werden vom Skript bereitgestellt :: 1 Script checks on heuristic described here: https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-16898-bad-neighbor/ Installation root@kitploit: zeek-pkg install...

CVE-2020-10749

CVE-2020-10749 CVE-2020-10749 PoC attacchi MitM su Kubernetes tramite annunci di router rogue IPv6 Solo a scopo educativo Requisiti Cluster Kubernetes con le seguenti versioni di kubelet kubelet v1.18.0-v1.18.3 kubelet v1.17.0-v1.17.6 kubelet mtu 1450 state UP inet6 fe80::3c07:afff:feb5:7219/64...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

Docker-Container-CVE-2020-13401

Estudo da CVE-2020-13401 Estudo sobre a vulnerabilidade CVE-2020-13401 em contêineres de dockers anteriores à versão 19.03.11 Contêineres criados com versões do Docker Engine anteriores à 19.03.11 estão vulneráveis a receber e aplicar mensagens RA Router Advertisement falsas de outros contêineres...

CVE-2026-74598

A flaw was found in the Linux kernel's IPv6 networking stack. An off-by-one error in the validation of the Route Information option length RFC 4191 allows a remote attacker to craft a Router Advertisement RA packet. This crafted packet can cause the kernel to read up to 8 bytes beyond the intende...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

EUVD-2026-64535

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

CVE-2026-53587

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in setdata in src/libgit2/transports/smartpkt.c without first...

EUVD-2026-63547

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in setdata in src/libgit2/transports/smartpkt.c without first...

CVE-2026-12633 Out-of-bounds write in IPv6 6LoWPAN Context Option handling via unauthenticated Router Advertisement

The IPv6 neighbor-discovery code in subsys/net/ip/ipv6nbr.c processes the 6LoWPAN Context Option 6CO, RFC 6775 carried inside ICMPv6 Router Advertisements. In handlera6co the 8-bit contextlen field is taken directly from the packet and was never bounded to the RFC maximum of 128. The function...

CVE-2026-12633

CVE-2026-12633 is an out-of-bounds write in the Zephyr RTOS IPv6 neighbor-discovery code (subsys/net/ip/ipv6_nbr.c). The function handle_ra_6co() processes the 6LoWPAN Context Option (RFC 6775) from ICMPv6 Router Advertisements without bounding the 8-bit context_len field to the RFC maximum of 12...

CVE-2026-16850

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...

EUVD-2026-62745

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...

CVE-2026-16850 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to command injection via crafted Router Advertisements...

CVE-2026-16850

IBM AIX 7.2 and 7.3, and PowerVM VIOS 4.1, are vulnerable to command injection via crafted Router Advertisements, enabling remote arbitrary code execution with HIGH severity (CVSS 8.8). Exploitation details are not provided in the documents; refer to the IBM support advisory for patch information.

PT-2026-78611

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A command injection flaw exists that allows a remote attacker to execute arbitrary code by sending specially crafted Router Advertisements. Router Advertisements are ICMPv6...

RLSA-2026:54210 Moderate: dhcpcd security update

The dhcpcd package provides a minimalistic network configuration daemon that supports IPv4 and IPv6 configuration including configuration discovery through NDP, DHCPv4 and DHCPv6 protocols. Security Fixes: dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Route...