MS17-010

This repository is for public analysis of the MS17-010 vulnerability. The repository contains various PoCs Proof of Concepts and exploits for the vulnerability, which is a remote code execution vulnerability in the Windows SMBv1 protocol. The vulnerability is caused by a buffer overflow in the...

Apple macOS SMB server create file request uninitialized memory disclosure

Summary A use of uninitialized data vulnerability exists in the SMB Server Apple macOS 11.2. A specially crafted SMB packet can cause uninitialized data to end up in server reply which can leak sensitive information. This vulnerability can be triggered by sending a malicious packet to the...

tcpdump: SMB data printing mishandled

tcpdump before 4.9.3 mishandles the printing of SMB data issue 1 of 2...

tcpdump: SMB data printing mishandled

tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...

SMBv3 Compression Buffer Overflow

A vulnerability exists within the Microsoft Server Message Block 3.1.1 SMBv3 protocol that can be leveraged to execute code on a vulnerable server. This remove exploit implementation leverages this flaw to execute code in the context of the kernel, finally yielding a session as NT AUTHORITY\SYSTE...

The vulnerability of the SMB Client component of Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SMB Client component of Microsoft Windows is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2021-31205

Windows SMB Client Security Feature Bypass Vulnerability...

PT-2021-3008 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings of the SMB Client component in Microsoft Windows operating systems. It allows a remote attacker to gain unauthorized access to protected...

The vulnerability in the implementation of the SMB protocol on Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SMB protocol implementation in Microsoft Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability in the implementation of the Microsoft Server Message Block (SMB) network protocol on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Server Message Block SMB network protocol implementation in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

This is a proof-of-concept PoC exploit for CVE-2020-0796, also known as SMBGhost, a pre-authentication remote code execution RCE vulnerability in the SMBv3 protocol. The exploit is written in Python and uses the SMB protocol to inject shellcode into the target system. The exploit targets Windows...

CVE-2021-28325

Windows SMB Information Disclosure Vulnerability...

CVE-2021-28324

Windows SMB Information Disclosure Vulnerability...

Microsoft Windows SMB Server 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in SMB in Microsoft Windows and Windows...

Microsoft Windows SMB 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in SMB in Microsoft Windows and Windows...

PT-2021-2623 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Server Message Block SMB protocol in Microsoft Windows, which lacks sufficient protection of service data. This can allow a remote attacker...

PT-2021-2636 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling memory objects in the implementation of the Microsoft Server Message Block SMB network protocol in Windows operating systems. This can allow a...

The vulnerability in the implementation of SMB and AFP network protocol functions in the My Cloud OS operating systems allows a perpetrator to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the SMB and AFP network protocol implementations in My Cloud OS operating systems is related to incorrect handling of symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code...

PortSwigger Burp Suite 安全漏洞

PortSwigger Burp Suite is an application from PortSwigger UK. Software for packet-catching proxies. A security vulnerability exists in PortSwigger Burp Suite that stems from an inability to block NetNTLM hashes on Windows systems with outbound SMB...

Purple Fox Rootkit Can Now Spread Itself to Other Windows Computers

Purple Fox , a Windows malware previously known for infecting machines by using exploit kits and phishing emails, has now added a new technique to its arsenal that gives it worm-like propagation capabilities. The ongoing campaign makes use of a "novel spreading technique via indiscriminate port...