Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user to make limited HTTP requests to hosts in the Ghost server's internal network on some network configurations. A successful attack would not result in any response data being returned...

NPM: Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses

NPM: Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses vulnerability discovered by ? in WordPress Npm ghost versions = 6.0.9, 6.65.0...

EvilFOCA

Evil FOCA Requirements Windows XP or later. .NET Framework 4 or later. Winpcap library http://www.winpcap.org Introduction Evil Foca is a tool for security pentesters and auditors whose purpose it is to test security in IPv4 and IPv6 data networks. The tool is capable of carrying out various...

etaHEN

etaHEN - AIO Homebrew enabler 🚀 Support the Project If you find this project useful and would like to support its continued development, consider buying me a coffee! Building from Source The Source code is provided in the Source code folder under GPLv3 with all the necessary files to build it as...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

CVE-2020-16898--EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability EXP&POC Reproduction forforever: https://www.cnblogs.com/forforever/p/13846077.html POC CVE-2020-16898Checker-poc Command: Run PowerShell/CMD as administrator Powershell.exe -ExecutionPolicy UnRestricted -File...

udp-hunter

What is UDP Hunter? UDP Scanning has always been a slow and painful exercise, and if you add IPv6 on top of UDP, the tool choices get pretty limited. UDP Hunter is a python based open source network assessment tool focused on UDP Service Scanning. With UDP Hunter, we have focused on providing...

pocsuite3

pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...

CVE-2026-20038

A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploi...

CVE-2024-38063

CVE-2024-38063 mitigation script by disabling ipv6 of all interfaces HOW TO Import the script like a module on a elevated Powershell run as admin . .\CVE-2024-38063 Use the functions Show-IPV6EnabledAdapters Show all adapters that have IPV6 enabled! PS C:\users\public Show-IPV6enabledAdapters...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability EXP&POC Reproduction forforever: https://www.cnblogs.com/forforever/p/13846077.html PoC CVE-2020-16898Checker-poc Command: Run PowerShell/CMD as Administrator Powershell.exe -ExecutionPolicy UnRestricted -File...

CVE-2026-20038 Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability

A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploi...

Cisco Nexus 9000 Series Fabric Switches in ACI Mode Endpoint Group Contract Bypass Vulnerability

A vulnerability in the endpoint group EPG contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass configured EPG contracts. This vulnerability is due to an improper control with EPG contracts. An attacker could exploi...

topera

Topera project page You can see more extensive reference of Topera at our web page at github: Topera project page What's Topera? Topera is a new security tools for IPv6, with the particularity that their attacks can't be detected by Snort. Snort is the most known IDS/IPS and is widely used in man...

CVE-2020-16899

CVE-2020-16899: Microsoft Windows TCP/IP Denial of Service Vulnerability CVSS Score: 7.5 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced a critical vulnerability in the Windows IPv6 stack, which allows an attacker to send...

CVE-2026-90711

A flaw was found in proxy-addr. When an application defines trusted proxy subnets using IPv4-mapped IPv6 addresses with an improper prefix length, the subnet parser fails open and erroneously treats all incoming network addresses as trusted. A remote, unauthenticated attacker can exploit this...

CVE-2022-34718-PoC

CVE-2022-34718 IPv6 Remote Code Execution exploit sample This repository contains an exploit of CVE-2022-34718, a Remote Code Execution RCE vulnerability in IPv6 on Windows systems. How to Since the vulnerability requires specially crafted IPv6 packets, it depends on the Scapy module and therefor...

CVE-2024-38063-poc

Real POC published https://github.com/ynwarcs/CVE-2024-38063 and I have updated in my code as well, This can cause crash into your system so use VM or just learning thing, you can get RCE by making changes in the code. Usage iface Most probably this is enabled bydefault. Check the...

mitm6

mitm6 mitm6 est un outil de test d'intrusion qui exploite la configuration par défaut de Windows pour prendre le contrôle du serveur DNS par défaut. Il le fait en répondant aux messages DHCPv6, en fournissant aux victimes une adresse IPv6 link-local et en définissant l'hôte de l'attaquant comme...

dionaea

dionaea - catches bugs Dionaea is meant to be a nepenthes successor, embedding python as scripting language, using libemu to detect shellcodes, supporting ipv6 and tls. Protocols blackhole epmap ftp http memcache mirror mqtt mssql mysql pptp sip smb tftp upnp Logging fail2ban hpfeeds logjson...