CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP リモートコード実行脆弱性調査 時間、エネルギー、正気、理解を節約するための包括的な調査です。まず最初に、この特定のCVEは、その高い深刻度スコアのために短期間で非常に多くの注目を集めた点で、多くのCVEと同様であることを述べておきます。その結果、多くの虚偽の情報や悪意のある活動がこの脆弱性を取り巻いています。この脆弱性を発見した最初の研究者は Wei です。 これには、正規のPoCのように見せかけてGitHubに投稿されたマルウェアベースのPoCも含まれますが、これに限定されません。...

CVE-2026-33827

🔴 CVE-2026-33827: Ejecución Remota de Código RCE en TCP/IP de Windows 📌 概述 CVE-2026-33827 是一个影响 Windows TCP/IP 网络栈的严重远程代码执行（RCE）漏洞。它被归类为 竞态条件（Race Condition）缺陷，原因是网络处理过程中共享资源同步不当。 未经身份验证 的攻击者可以通过向启用了 IPSec 的 Windows 节点发送特制的 IPv6 数据包来利用此漏洞，从而在无需用户交互 的情况下以系统权限 执行任意代码。 ⚠️ 严重影响 ：无需凭据即可完全控制系统 📊...

Windows-CVE-2024-38063

Windows CVE-2024-38063 CVE ID: CVE-2024-38063 CVSS 3.1 Score: 9.8 Critical EPSS Score: Low - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impact: Remote Code Execution Affected Components: Windows TCP/IP stack Attack Vector: Network Remote Vulnerability Details...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipvti: A potential issue related to slab-use-after-free has been fixed in decodesession6. When the ipvti device is set as a qdisc of the sfb type, the cb field of the sent skb may be modified during enqueueing. This can lead to a...

CVE-2026-68127

A flaw was found in the Linux kernel's Identifier-Locator Addressing ILA subsystem. This vulnerability, a use-after-free, occurs during the processing of IPv6 packets when an ILA checksum adjustment transport route is configured. A remote attacker, after an administrator has configured the...

Linux Distros Unpatched Vulnerability : CVE-2026-63870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: 6lowpan: only accept IPv6 packets in lowpanxmit The aoe driver or similar generates a non-IPv6 packet e.g., ETHPAOE and queues it for transmission v...

kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets

A flaw was found in the Linux kernel's netfilter component. This vulnerability occurs because the eui64mt6 function, which processes IPv6 packets, does not properly validate the MAC header for all packets. Specifically, packets with a zero fragment offset could bypass an existing guard, allowing...

kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets

A flaw was found in the Linux kernel's netfilter component. This vulnerability occurs because the eui64mt6 function, which processes IPv6 packets, does not properly validate the MAC header for all packets. Specifically, packets with a zero fragment offset could bypass an existing guard, allowing...

Linux 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel. This vulnerability stems from the netfilter nftinner module, which incorrectly calculates the transmission header...

OpenThread 输入验证错误漏洞

OpenThread is an open-source implementation of the Thread network protocol stack developed by OpenThread. Versions prior to OpenThread 26a882d contained a vulnerability related to input validation errors. This vulnerability stemmed from improper input validation in the NAT64 converter, allowing...

Palo Alto Networks Prisma SD-WAN ION 安全漏洞

Palo Alto Networks Prisma SD-WAN ION is a series of next-generation software-defined enterprise branch devices from the American company Palo Alto Networks. These devices integrate 4G or 5G cellular network access capabilities. There is a security vulnerability in Palo Alto Networks Prisma SD-WAN...

CVE-2026-8369: Improper Input Validation

Improper Input Validation in the NAT64 translator in The OpenThread Authors OpenThread before commit 26a882d on all platforms allows an attacker on the adjacent IPv4 network to inject corrupted IPv6 packets into the Thread mesh or bypass security checks via crafted IPv4 packets with options...

Juniper Junos OS Vulnerability (JSA96461)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA96461 advisory. - A Buffer Access with Incorrect Length Value vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-006979)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006979 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvti: fix potential slab-use-after-free in decodesession6 When ipvti device is set to the qdisc ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007249 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decodesession6 When the xfrm device is set to the qdisc of the s...

CVE-2026-33790

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon flowd of Juniper Networks Junos OS on SRX Series allows an attacker sending a specific, malformed ICMPv6 packet to cause the srxpfe process to crash and restart. Continued receipt and processing of these...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006738)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006738 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvti: fix potential slab-use-after-free in decodesession6 When ipvti device is set to the qdisc ...

CVE-2011-0944

Cisco IOS 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service device reload via malformed IPv6 packets, aka Bug ID CSCtj41194...

EUVD-2023-60049

Nagios Log Server versions prior to 2024R1 are vulnerable to cross-site scripting XSS via the Create User function. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

CVE-2025-11618

A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6. We recommend upgrading to the...