huawei-p10-cve-2017-8890-unlock

Investigación sobre el desbloqueo del bootloader de Huawei P10 CVE-2017-8890 Este repositorio documenta un proyecto de investigación autorizado por el propietario que portó CVE-2017-8890 a un firmware de Huawei P10, convirtió el use-after-free del kernel en lectura/escritura arbitraria del kernel...

ipv6tools

IPv6Tools The IPv6Tools framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper...

cve-2017-8890-msf

模块：Phoenix Talon CVE 2017-8890 这可能会解决 issue 8571，该 issue 请求了 Phoenix Talon 模块。 2017-8890 概述 此 CVE： 是 Linux 内核漏洞 Phoenix Talon 类中最严重的一个。在 Exploit DB 中没有此 CVE 的 POC，但其他公开的 POC 可用。 文档资料较少。但这里有一个 简短解释 可以帮助你大致了解该漏洞。 存在于所有内核版本至 4.10.15，尽管一些资料称其存在于 4.11 之前。在此查看补丁提交。 是内核 IPv4 栈（特别是多播）中的一个缺陷导致的。...

spycast

SpyCast は、アクティブモード（サービスを再帰的にクエリする）またはパッシブモード（マルチキャストパケットのみをリッスンする）で動作可能なクロスプラットフォームの mDNS 列挙ツールです。 ビルド cargo build --release OS固有のバンドルパッケージ（例：OSXのdmgやアプリバンドル）は以下でビルドできます： cargo tauri build SpyCast はデフォルトのUIなしでもビルドでき、その場合すべての出力がターミナルに表示されます： cargo build --no-default-features --release 実行 アクティブモードで...

Sapito

Sapito 作者：Sebastian Garcia [email protected], @eldracote, Veronica Valeros [email protected], @verovaleros 关于 Sapito Sapito 是一个用 Python 编写的组播 DNS（mDNS）嗅探器和解释器。Sapito 从 pcap 文件或网络接口中嗅探数据包，并解释其发现的内容。这意味着 Sapito 能够理解 mDNS 查询和应答，从而解析这些消息的含义。它还可以识别某些设备，例如识别 MacOS 电脑以及多种...

ExploiteameEsta

ExploiteameEsta CVE-2021-30937 漏洞检测应用 这是什么？ 该项目是一款适用于 iOS 15.0-15.1.1 设备的 iOS 应用。你可以测试上述漏洞是否适用于你的设备。 在此过程中，你会看到多个提示和弹出窗口，告知你相关信息。 我们来自... https://github.com/potmdehex/multicastbytecopy 项目仍在开发中。请预期会出现错误。...

Rocky Linux 9.6 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel (ALMALINUX9.6:CLSA-2026:1790008457)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790008457 advisory. - A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast...

AlmaLinux 9.6 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel (ALMALINUX9.6:CLSA-2026:1790008457)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790008457 advisory. - A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast...

SUSE CVE-2026-97939

In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRTTABLE and MRT6TABLE. Each unseen id allocates an mrtable via the shared mrtablealloc...

CVE-2026-97939

A flaw was found in the Linux kernel's IP multicast routing subsystem. A local user with network administration privileges inside a network namespace can create an excessive number of multicast routing tables. Because these allocations are not tracked against memory control group limits, kernel...

kernel: net: bridge: stop fast-leave after deleting a port group

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

Amazon Linux 2 : corosync (ALAS-2026-3955)

The version of corosync installed on the remote host is prior to 2.4.3-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3955 advisory. A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented...

CVE-2026-98026

A flaw was found in the Linux kernel's network bridge subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS or system crash through a use-after-free condition. This issue occurs during multicast port group removal, where the kernel immediately frees data...

CVE-2026-98122

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN driver. A local unprivileged attacker can cause a denial of service DoS or potentially escalate privileges through memory corruption. This vulnerability occurs because the Multicast Database MDB subsystem improperly validates...

Important: corosync

Issue Overview: A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send...

DEBIAN-CVE-2026-98099

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcuassignpointer for rcu list updates Several places in net/ipv6/mcast.c update RCU-protected lists np-ipv6mclist, idev-mclist, idev-mctomb using direct pointer assignments instead of rcuassignpointer: 1. In...

CVE-2026-98101

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use copy-on-write RCU updates in ip6mcsource pmc-sflist is read locklessly under rcureadlock by inet6mccheck during packet reception in the UDP and RAW multicast receive paths. ip6mcsource mutated psl-sladdr and...

DEBIAN-CVE-2026-97939

In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRTTABLE and MRT6TABLE. Each unseen id allocates an mrtable via the shared mrtablealloc...

AZL-104625 CVE-2026-97939 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRTTABLE and MRT6TABLE. Each unseen id allocates an mrtable via the shared mrtablealloc...

CVE-2026-97939

In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRTTABLE and MRT6TABLE. Each unseen id allocates an mrtable via the shared mrtablealloc...