packETH

packETH packETH is GUI and CLI packet generator tool for ethernet. It allows you to create and send any possible packet or sequence of packets on the ethernet link. It is very simple to use, powerful and supports many adjustments of parameters while sending packets. It runs on Linux. With the GUI...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

etherify

Etherify - bringing the ether back to ethernet c 2020 Jacek Lipkowski SQ5BPF [email protected] 2020 RC3 Conference talk: https://www.youtube.com/watch?v=7ek994-fwNE Etherify 1 and 2: https://lipkowski.com/etherify with RPI 4 Etherify 3: https://lipkowski.com/etherify3/ with no ethernet cable...

CVE-2026-98275

A flaw was found in the Linux kernel's Cortina Ethernet driver. This flaw may result in a Denial of Service DoS when a network receive buffer overrun occurs. Due to an incorrect bit calculation, the interrupt service routine acknowledges the wrong register bit, leaving the overrun interrupt...

CVE-2026-99195

A flaw was found in the Linux kernel's OpenCores Ethernet driver ethoc. During device initialization, the driver connects the physical network interface before assigning its network device operations. A local attacker capable of triggering device probing on a system configured with network traffi...

CVE-2026-99196

A flaw was found in the Linux kernel's Au1000 ethernet driver. During device probing with network traffic shaping enabled, the driver attempts to access network operations before they are assigned. This flaw allows a local user or hardware attachment event to trigger a null pointer dereference,...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskbmaypull in batadvinterfacerx could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

CVE-2026-99193

A flaw was found in the Linux kernel's Texas Instruments PRU Ethernet driver. A local user capable of triggering network device initialization can cause a Denial of Service DoS by crashing the operating system. When the network interface is probed on a system with network traffic shaping enabled,...

Linux kernel DoS

The vulnerability in the drivers/net/ethernet/freescale/enetc/enetc.c component of the Linux kernel is related to an improper implementation of a control flow. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, c 0x8086200F, or d...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 Local Privilege Escalation PoC Overview This project is an educational proof-of-concept for a Local Privilege Escalation LPE vulnerability in the driver iqvw64e.sys SHA256: 37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 — the Intel...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit Module This module sends a specially crafted packet to Port 50000/UDP could cause a denial of service of the...

USBCoercer

Supported Targets| ESP32-S3 ---|--- USBCoercer: A TinyUSB based WPAD Coercion Device USBCoercer turns an ESP32 development board with native USB-OTG into an Ethernet-over-USB gadget capable of coercing proxy configuration via WPAD. It builds on the TinyUSB Network Control Model NCM example and ad...

Pwn2Own-Auto-2024-CHARX

Pwn2Own Automotive 2024 CHARX Exploit This exploit was submitted successfully against the Phoenix Contact CHARX SEC-3100 during Pwn2Own Automotive 2024. An accompanying blog post covers some of our research process and details on the vulnerabilities found, with a follow-up post on the actual...

CLEANSTART-2023-GS45461 Ethernet parser in tcpdump before 4

Security vulnerability affects the tcpdump package. The Ethernet parser in tcpdump before 4...

GenEtherExploit

EN GenEtherExploit is a Proof-of-Concept PoC exploit for the macOS vulnerability CVE-2023-40404. This PoC leverages IOKit APIs to interact with the IOUserEthernetResource network service, manipulating the system's network interfaces. The purpose of this exploit is to demonstrate a potential kerne...

CLEANSTART-2024-ZH83758 Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3

Security vulnerability affects the wireshark package. Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3...

CECster

CECSTeR CECSTeR is the Consumer Electronics Control Security Testing Resource - a GUI-based tool to perform security testing against the HDMI CEC Consumer Electronics Control and HEC HDMI Ethernet Channel protocols Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by...

eero-zero-length-ipv6-options-header-dos

eeroOS Ethernet Interface Denial of Service Vulnerability CVE-2023-5324 If eero Pro 5 devices receive an IPv6 packet where the payload length is zero and contains a hop-by-hop or destination options extension header that refers to another hop-by-hop or destination options extension header that...

cip-security-poc

cip-security-poc — proving the fix principle behind CVE-2021-22681 not just its flaw Six runnable scripts — real EtherNet/IP protocol traffic Test 1, real TLS/PKI mechanics Tests 3–6 — zero Rockwell software or licensing anywhere in the chain. Built to test a claim before writing it up, not to...