CVE-2022-23093

CVE-2022-23093 FreeBSD 基于栈的溢出 信息 默认使用的 shellcode 是 FreeBSD/x86-64 - execve - 28 字节（来自 Gitsnik） ，请替换为你自己的以进行启动 漏洞详情 ping 工具用于向主机或网关请求 ICMP ECHORESPONSE，它通过 ICMP 协议必须的 ECHOREQUEST 数据报，以 IPv4 目标（IPv4 主机或 IPv4 多播组）进行调用。ECHOREQUEST 数据报由 IP 和 ICMP 头组成，随后是一个 "struct timeval" 和数量可变的 "pad" 字节，用于填充数据包。 根据...

DrayTek-Exploit

CVE-2022-23093 FreeBSD 基于栈的溢出 信息 ⚠️ 默认使用的 shellcode 是 FreeBSD/x86-64 - execve - 28 bytes from Gitsnik ，请将其替换为您自己的 shellcode 以启动 ⚠️ 漏洞详情 ping 工具用于向主机或网关请求 ICMP ECHORESPONSE，它通过 ICMP 协议的强制 ECHOREQUEST 数据报，使用 IPv4 目标（IPv4 主机或 IPv4 多播组）进行调用。ECHOREQUEST 数据报由一个 IP 头部和一个 ICMP 头部组成，后面跟着一个 "struct timeval"...

openbsd_ov1

OpenBSD TCP/IP 溢出 已在最新的 OpenBSD 7.2 上测试 详情： root@kitploit: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN - uchar ip; goto bad; switch opt...

CVE-2026-16839

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...

CVE-2026-16839

Affected products: IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1. Root cause: integer underflow in the IPv4 IP-options parser, exploitable remotely with no authentication. Impact: CVSS 9.4 (Critical) — high integrity/availability, low confidentiality. Exploitation status: no in-the-wild exploitation or ...

CVE-2026-16839 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...

EUVD-2026-62728

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100760)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100760 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Reco...

CVE-2026-53249

In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPTSSRR and IPOPTLSRR options This patch restricts setting Loose Source and Record Route LSRR and Strict Source and Record Route SSRR IP options to users with CAPNETRAW capability. This prevents unprivileged...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002160 advisory. The cipsov4validate function in net/ipv4/cipsoipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service NULL pointer dereference and...

CVE-2021-31344

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0, SIMOTICS CONNECT 400 All versions V1.0.0.0. ICMP echo packets with fake IP...

CVE-1999-0905

Denial of service in Axent Raptor firewall via malformed zero-length IP options...

EUVD-2002-1811

Malware in sbrugna...

EUVD-2002-0522

Malware in sbrugna...

EUVD-2017-15039

Malware in sbrugna...

EUVD-2006-0845

Malware in sbrugna...

EUVD-2021-18254

Malware in sbrugna...

CVE-2022-23093

ping reads raw IP packets from the network to process responses in the prpack function. As part of processing a response ping has to reconstruct the IP header, the ICMP header and if present a "quoted packet," which represents the packet that generated an ICMP error. The quoted packet again has a...

kernel: ipvlan: out-of-bounds write caused by unclear skb->cb

A flaw was found in the IPVLAN network driver in the Linux kernel. This issue is caused by missing skb-cb initialization in ipoptionsecho and can lead to an out-of-bounds write stack overflow. This may allow a local user to cause a denial of service or potentially achieve local privilege escalati...

CVE-2023-42754

A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer skb was assumed to be associated with a device before calling ipoptionscompile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAPNETADMIN privileges t...