PiX-C2

PiX-C2 ICMP C2 服务器应用程序 由 NoCow 编写 邮箱：[email protected] ICMP C2 项目（即 PiX-C2）是一个客户端/服务器应用程序，仅使用 ICMP 即可实现命令与控制。服务器将嗅探 ICMP 数据包，并从 ICMP 数据包的数据载荷中提取信息。 如果收到正确的数据，则会向客户端发送命令。命令必须以 "run " 开头。服务器的其他选项包括 sleep、sysinfo 等，更多功能即将推出。 假设条件： 你在客户端/服务器机器上拥有 root/管理员权限 客户端/服务器机器上已安装 Python/Scapy 已安装 Mysql 组...

ICMP-TransferTools

ICMP-TransferTools ICMP-TransferTools 是一套脚本，旨在在受限网络环境中向 Windows 主机传输文件或从 Windows 主机传出文件。这通过总共 4 个不同的文件实现，包括一个 Python 服务器和一个 PowerShell 客户端，分别用于每个传输方向（下载和上传）。 唯一需要的依赖是 Impacket，用于其中一个 Python 脚本。可以通过 pip 安装，如下所示： pip3 install impacket 通过 ICMP 下载 包含的 ICMP-SendFile.py 和 Invoke-IcmpDownload.ps1 脚本可用于通...

CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit

CVE-1999-0524 - Explotación de solicitudes de Timestamp y Máscara de dirección ICMP Descripción Esta herramienta está diseñada para atacar CVE-1999-0524, una vulnerabilidad en el protocolo ICMP que permite a hosts arbitrarios enviar solicitudes de Timestamp y Máscara de dirección ICMP a un sistem...

OESA-2026-3302 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTORAW MUST drop incoming ICMP Yizhou Zhao reported that simply having one RAW socket on protocol IPPROTORAW 255 was dangerous...

CVE-2026-43099

A flaw was found in the Linux kernel, specifically within the IPv4 Internet Protocol version 4 and ICMP Internet Control Message Protocol components. When the IPv6 Internet Protocol version 6 stack is not active, a specific function ipv6devfind can return an error. If this error is then passed to...

CVE-2026-43099

In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmpbuildprobe ipv6stub-ipv6devfind may return ERRPTR-EAFNOSUPPORT when the IPv6 stack is not active CONFIGIPV6=m and not loaded, and passing this error pointer to devhold will cause a kernel cra...

OESA-2026-2173 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmptagvalidation icmptagvalidation unconditionally dereferences the result of rcudereferenceinetprotosproto without checki...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001639)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001639 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disconnect...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002320 advisory. The pingunhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allow...

EUVD-2024-52241

Malicious code in bioql PyPI...

CVE-2024-54010

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch...

[SECURITY] Fedora 42 Update: iputils-20240905-4.fc42

The iputils package contains basic utilities for monitoring a network, including ping. The ping command sends a series of ICMP protocol ECHOREQUEST packets to a specified network host to discover whether the target machine is alive and receiving network traffic...

kernel: net: restrict SO_REUSEPORT to inet sockets

In the Linux kernel, the following vulnerability has been resolved: net: restrict SOREUSEPORT to inet sockets After blamed commit, crypto sockets could accidentally be destroyed from RCU call back, as spotted by zyzbot 1. Trying to acquire a mutex in RCU callback is not allowed. Restrict...

SUSE CVE-2025-47268

ping in iputils before 20250602 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication...

DEBIAN-CVE-2025-47268

ping in iputils before 20250602 allows a denial of service application error or incorrect data collection via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication...

CVE-2024-54010 Unauthenticated Traffic Handling Flaw Allows Packet Leakage on HPE Aruba Networking CX 10000 series switches

A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be successful an attacker requires a switch...

CVE-2024-54010

CVE-2024-54010 describes a vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches. An unauthenticated adjacent attacker could perform a packet forwarding attack against ICMP and UDP if the switch is configured to allow Layer 3 routing. The attack relies on routin...

UBUNTU-CVE-2024-56647

In the Linux kernel, the following vulnerability has been resolved: net: Fix icmp host relookup triggering iprtbug arp link failure may trigger iprtbug while xfrm enabled, call trace is: WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 iprtbug+0x14/0x20 Modules linked in: CPU: 0 UID: 0 PID: 0 Comm...

icmp: prevent possible NULL dereferences from icmp_build_probe()

...

kernel: icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.

A flaw was found in the Linux kernel's ICMP protocol. A race condition can occur when reading the sysctlicmperrorsuseinboundifaddr resource due to a missing lock, potentially impacting system stability and resulting in a denial of service...