ipv6tools

IPv6Tools The IPv6Tools framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper...

Sapito

Sapito Authors: Sebastian Garcia [email protected], @eldracote, Veronica Valeros [email protected], @verovaleros About Sapito Sapito is a multicast DNS mDNS sniffer and interpreter written in Python. Sapito sniffs packets from a pcap or interface and interprets the findings. This means...

multicast_bytecopy

multicastbytecopy This code is published for security researchers, do not use this code for any purpose unless you know what you are doing. multicastbytecopy is a kernel r/w exploit for iOS 15.0 - 15.1.1 by @jaakerblom and the spiritual successor of multipathkfree. The exploit can be adapted to...

huawei-p10-cve-2017-8890-unlock

Huawei P10 CVE-2017-8890 bootloader-unlock research This repository documents an owner-authorized research project that ported CVE-2017-8890 to one Huawei P10 firmware, converted the kernel use-after-free into arbitrary kernel read/write and temporary root, reconstructed Huawei's NVE journal,...

cve-2017-8890-msf

Module: Phoenix Talon CVE 2017-8890 This may resolve issue 8571, which requests Phoenix Talon modules. Overview of 2017-8890 This CVE: is the most serious member of the Phoenix Talon class of Linux kernel vulnerabilities. No POC of this CVE exists in the Exploit DB. But other public POC's are...

kernel: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

kernel: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

kernel: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

kernel: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context

A flaw was found in the Linux kernel's bridge multicast mcast component. A race condition in the handling of a master VLAN's multicast context during teardown can allow a network attacker to trigger a use-after-free vulnerability. This could lead to system instability or a denial of service DoS...

CVE-2026-87042

The IEEE 1588 PTP port implementation in subsys/net/lib/ptp/port.c adopted the logMessageInterval field of a received DelayResp message without any validation. portdelayrespmsgprocess stored the raw wire value a full-range int8t into portds.logmindelayreqinterval, and that value is later used as ...

CVE-2026-87042

The IEEE 1588 PTP port implementation in subsys/net/lib/ptp/port.c adopted the logMessageInterval field of a received DelayResp message without any validation. portdelayrespmsgprocess stored the raw wire value a full-range int8t into portds.logmindelayreqinterval, and that value is later used as ...

CVE-2026-116697

Null pointer dereference in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to deny service over a network...

CVE-2026-116697

CVE-2026-116697 describes a null pointer dereference vulnerability within the Reliable Multicast Transport Driver (RMCAST) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. While specific affected software versions and direct exploit links are...

EUVD-2026-122079

Null pointer dereference in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to deny service over a network...

Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability

Null pointer dereference in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to deny service over a network...

PT-2026-143652

Null pointer dereference in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to deny service over a network...

PT-2026-144851

The IEEE 1588 PTP port implementation in subsys/net/lib/ptp/port.c adopted the logMessageInterval field of a received Delay Resp message without any validation. port delay resp msg process stored the raw wire value a full-range int8 t into port ds.log min delay req interval, and that value is lat...

modcluster-core: mod_cluster Advertise Listener: unauthenticated DoS via crafted multicast datagram

A flaw was found in modcluster's AdvertiseListenerImpl org.jboss.modcluster core module. A single crafted UDP multicast datagram with a valid HTTP status line and a "Server:" header but without the "Date:", "Digest:", and "Sequence:" headers triggers a NullPointerException in verifyDigest that is...

modcluster-core: mod_cluster Advertise Listener: unauthenticated DoS via crafted multicast datagram

A flaw was found in modcluster's AdvertiseListenerImpl org.jboss.modcluster core module. A single crafted UDP multicast datagram with a valid HTTP status line and a "Server:" header but without the "Date:", "Digest:", and "Sequence:" headers triggers a NullPointerException in verifyDigest that is...

Linux xen-netback: guest can trigger use-after-free for reading multicast data

ISSUE DESCRIPTION Multicast handling in the driver is implemented as a lookup early on the transmit guest receive path. The respective function can be invoked in parallel with teardown of a device. Thus the lookup may access data which was already freed, with that memory perhaps already being in...