120 matches found
CVE-2022-23093
CVE-2022-23093 Desbordamiento de pila en FreeBSD Información El shellcode que se usa por defecto es FreeBSD/x86-64 - execve - 28 bytes de Gitsnik , cámbialo y pon el tuyo propio para comenzar. Detalles de la Vulnerabilidad La utilidad ping, utilizada para solicitar un ICMP ECHORESPONSE de un host...
DrayTek-Exploit
CVE-2022-23093 FreeBSD 基于栈的溢出 信息 ⚠️ 默认使用的 shellcode 是 FreeBSD/x86-64 - execve - 28 bytes from Gitsnik ,请将其替换为您自己的 shellcode 以启动 ⚠️ 漏洞详情 ping 工具用于向主机或网关请求 ICMP ECHORESPONSE,它通过 ICMP 协议的强制 ECHOREQUEST 数据报,使用 IPv4 目标(IPv4 主机或 IPv4 多播组)进行调用。ECHOREQUEST 数据报由一个 IP 头部和一个 ICMP 头部组成,后面跟着一个 "struct timeval"...
openbsd_ov1
Desbordamiento TCP/IP en OpenBSD Probado con la última versión de OpenBSD 7.2 Detalles: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN -...
PT-2026-91306
In the Linux kernel, the following vulnerability has been resolved: ipv6: seg6: clear IPv4 control block on IPIP decapsulation End.DX4 and End.DT4 decapsulate an IPv4 packet through decap and validate and send it directly to IPv4 routing. The inner packet therefore bypasses ip rcv core, which...
CVE-2026-16839
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
CVE-2026-16839 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
CVE-2026-16839
Affected products: IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1. Root cause: integer underflow in the IPv4 IP-options parser, exploitable remotely with no authentication. Impact: CVSS 9.4 (Critical) — high integrity/availability, low confidentiality. Exploitation status: no in-the-wild exploitation or ...
EUVD-2026-62728
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
CVE-2026-16839 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
PT-2026-78601
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer underflow in the IPv4 IP-options parser allows a remote attacker to obtain sensitive information. An integer underflow occurs when an arithmetic operation results...
CVE-2026-16839: Out-of-bounds Read
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100760)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Reco...
AZL-90642 CVE-2026-53249 affecting package kernel for versions less than 6.6.143.1-1
In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Record Route LSRR and Strict Source and Record Route SSRR IP options to users with CAPNETRAW capability. This prevents unprivileged...
CVE-2026-53249
In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Record Route LSRR and Strict Source and Record Route SSRR IP options to users with CAPNETRAW capability. This prevents unprivileged...
CVE-2026-53249: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Record Route LSRR and Strict Source and Record Route SSRR IP options to users with CAPNETRAW capability. This prevents unprivileged...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002160)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002160 advisory. The cipsov4validate function in net/ipv4/cipsoipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service NULL pointer dereference and...
CVE-2021-31344
A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0, SIMOTICS CONNECT 400 All versions V1.0.0.0. ICMP echo packets with fake IP...
CVE-1999-0905
Denial of service in Axent Raptor firewall via malformed zero-length IP options...