60 matches found
sharesniffer
sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...
sift
Sift Secrets Triaje de exposición de credenciales y datos sensibles para recursos compartidos de archivos. Cuando aparece un recurso compartido abierto, la pregunta nunca es "¿este repositorio tiene una clave filtrada". Es "¿qué se ha expuesto y qué tengo que rotar antes del cierre del día?" sift...
avml
AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...
ActiveReign
ActiveReign ⚠️ 感谢您的支持。本项目不再公开维护。 背景 不久前，我接到了一个挑战：用 Python3 编写一个发现工具，能够自动化查找网络文件共享上的敏感信息。在用 pysmb 完整编写了该工具，并添加了诸如打开和扫描 docx 与 xlsx 文件的功能之后，我开始逐步集成优秀的 Impacket 库中的功能——仅是我希望在内部渗透测试工具中看到的简单特性。添加的功能越多，它看起来就越像从头重写的 CrackMapExec 的 Python3 版本。 如果直接进行比较，CME 是一个出色的工具，其功能远多于当前实现。不过，我添加了一些新功能和修改，可能会在评估过程中派上用场...
EUVD-2026-42152
An authenticated stored cross-site scripting XSS vulnerability in the Upload File Shares API of LiquidFiles v4.2.7 allows attackers to execute arbitrary Javascript or HTML via injecting a crafted payload into the Name parameter...
CVE-2026-36162
An authenticated stored cross-site scripting XSS vulnerability in the Upload File Shares API of LiquidFiles v4.2.7 allows attackers to execute arbitrary Javascript or HTML via injecting a crafted payload into the Name parameter...
CVE-2026-36162
An authenticated stored cross-site scripting XSS vulnerability in the Upload File Shares API of LiquidFiles v4.2.7 allows attackers to execute arbitrary Javascript or HTML via injecting a crafted payload into the Name parameter...
PT-2026-56276
Name of the Vulnerable Software and Affected Versions LiquidFiles version 4.2.7 Description An authenticated stored cross-site scripting XSS issue exists in the Upload File Shares API. This allows an attacker to execute arbitrary Javascript or HTML by injecting a crafted payload into the Name...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
kernel: Linux kernel: smb: client: reject userspace cifs.spnego descriptions
A privilege escalation vulnerability was found in the Linux kernel's CIFS client implementation. This could allow a local attacker to impersonate other users, bypass authentication in SMB mount operations, and potentially gain unauthorized access to network file shares or escalate privileges...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003754)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003754 advisory. Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists. Tenable has extracted the preceding description...
CVE-2023-49332
Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while adding file shares...
CVE-2025-63958
MILLENSYS Vision Tools Workspace 6.5.0.2585 exposes a sensitive configuration endpoint /MILLENSYS/settings that is accessible without authentication. This page leaks plaintext database credentials, file share paths, internal license server configuration, and software update parameters. An...
Astra Linux – Vulnerability in Samba
A flaw was discovered in Samba. The smbd service daemon does not detect changes in group membership when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then reconnect...
CVE-2025-43724
CVE-2025-43724 affects Dell PowerScale OneFS; prior to 9.12.0.0, an authorization bypass via a user-controlled key could let a locally privileged attacker access NFSv4/SMB shares. Evidence across multiple sources confirms the issue and that remediation is to upgrade to 9.12.0.0 or later. If explo...
CVE-2025-58753
Copyparty vulnerability CVE-2025-58753 affects the Copyparty portable file server. The issue is a missing permission check in the shares feature (shr global option) that allowed access to other files in the same folder when a share was created for a single file, by guessing filenames. Subdirector...
DEBIAN-CVE-2025-0620
A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again...