CVE-2012-5960-PoC

CVE-2012-5960-PoC CVE-2012-5960, CVE-2012-5959 Proof of Concept 隨手記錄一下最近玩的東西。 !/usr/bin/python2 -- coding: utf-8 -- Usage: python2 libupnpDoSPoC.py import socket TARGET = 'TARGETIP' ''' normaltraffic = \ 'M-SEARCH HTTP/1.1\r\n' \ 'HOST:239.255.255.250:1900\r\n' \ 'MX:3\r\n' ...

NetAudit-IoT

UPnP-Exploit-Auditor Advanced Research Tool for libupnp Vulnerabilities This repository contains professional research and a reconnaissance tool focused on libupnp 1.6.19 memory corruption vulnerabilities specifically CVE-2012-5958. Key Features Version Fingerprinting: Detects vulnerable libupnp...

CVE-2026-55862

A flaw was found in libupnp. Several Document Object Model DOM traversal functions process deeply nested XML structures using unbounded recursion. An unauthenticated attacker on the local network can exploit this flaw by sending a crafted SOAP request containing deeply nested XML, exhausting stac...

CVE-2026-77630

A flaw was found in libupnp. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by submitting requests containing slow or non-responsive hostnames. Because the library performs synchronous network address lookups on attacker-supplied hostnames, worker...

CVE-2026-57487

A flaw was found in libupnp. The HTTP parser fails to enforce configured message size limits when processing chunked transfer-encoded HTTP requests. A remote attacker can exploit this vulnerability by sending an excessively large chunked payload, forcing the application to buffer data beyond...

libupnp - Unauth POST Write Detection (CVE-2016-6255)

Detects CVE-2016-6255 by POSTing a test file to the web root and retrieving it. !/usr/bin/env python3 -- coding: utf-8 -- """libupnp unauthenticated POST write CVE-2016-6255.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

MGASA-2026-0223 Updated libupnp packages fix security vulnerability

Port truncation via atoi cast in parseuri allows SSRF port confusion. CVE-2026-41682...

Updated libupnp packages fix security vulnerability

Port truncation via atoi cast in parseuri allows SSRF port confusion. CVE-2026-41682...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: libupnp (UTSA-2026-016655)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016655 advisory. Portable UPnP SDK aka libupnp 1.12.1 and earlier allows remote attackers to cause a denial of service crash via a crafted SSDP message due to a NULL pointer...

OPENSUSE-SU-2024:10300-1 libupnp-devel-1.6.19-1.8 on GA media

These are all security issues fixed in the libupnp-devel-1.6.19-1.8 package on the GA media of openSUSE Tumbleweed...

Ubuntu 16.04 ESM : libupnp vulnerabilities (USN-4794-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4794-1 advisory. Matthew Garrett discovered that libupnp mishandled POST requests by default. An attacker could use this vulnerability to write files to arbitrary locatio...

Debian: Security Advisory (DLA-747-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-597-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2012-5961

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers to execute arbitrary code via a long UDN aka device field in a UDP packet...

SUSE CVE-2021-29462

The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp libupnp appears to be vulnerable to DNS rebinding attacks because it does not check the value of the Host header. This can be mitigated by using DNS revolvers which...

Ubuntu: Security Advisory (USN-4794-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2021-0319)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0270)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0266)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0002)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...