From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack

EternalBlueからCVE-2025-2776へ：SMB攻撃の進化 2017年に世界を震撼させた攻撃は、今日のCVE‑2025‑2776へと進化しました。Microsoftは今もSMBv1に依存しており、この記事では、攻撃者が単純なDLLから完全なリバースシェルスタックへと攻撃チェーンをどのように改良してきたのか、そしてそれが防御側にとって何を意味するのかを説明します。 簡単な歴史の振り返り...

ligolo-ng

Ligolo-ng : Tunneling like a VPN An advanced, yet simple, tunneling tool that uses TUN interfaces. 📑 Ligolo-ng Documentation Setup/Quickstart !TIP Ligolo-ng 0.8 added a lot of new features, including: 🌐 API and a beautiful Web Interface thanks to L'ami du Raisin, allowing multiplayer! ⚙️ Simple...

Reticulum

Reticulum Network Stack 이 저장소는공개 미러입니다. 모든 개발은 다른 곳에서 이루어지고 있습니다. 이 시스템의 기반 철학과 목표를 이해하려면 Reticulum의 선을 읽어보세요. Reticulum은 기성 하드웨어로 로컬 및 광역 네트워크를 구축하기 위한 암호화 기반 네트워킹 스택입니다. 매우 높은 지연 시간과 극도로 낮은 대역폭에서도 작동할 수 있습니다. Reticulum을 사용하면 기성 도구로 광역 네트워크를 구축할 수 있으며, 종단 간 암호화 및 연결성, 개시자 익명성, 자동 구성되는 암호학적으로 지원되...

GenEtherExploit

GenEtherExploit GenEtherExploit는 macOS 취약점 CVE-2023-40404에 대한 PoCProof-of-Concept 익스플로잇입니다. 이 PoC는 IOKit API를 활용하여 IOUserEthernetResource 네트워크 서비스와 상호작용하며 시스템의 네트워크 인터페이스를 조작합니다. 이 익스플로잇의 목적은 이더넷 컨트롤러를 생성하고 상호작용함으로써 취약한 macOS 시스템에서 잠재적인 커널 패닉을 유발할 수 있음을 입증하는 것입니다. 면책 조항 이 코드는 교육 및 연구 목적으로만 제공됩니다...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

check_icmp_dos

checkicmpdos iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC： root@kitploit: pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 またはスクリプトを使用 root@kitploit: python checkicmpdos.py 127.0.0.1...

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: inet6: Do not leave a dangling sk pointer in inet6create. sockinitdata attaches the allocated sk pointer to the provided sock object. If inet6create fails later, the sk object is released, but the sock object retains the...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ip6mr: Fixed skbunderpanic in ip6mrcachereport. skbuff: skbunderpanic: Text: fffffffff88771f69; Len: 56; Put: -4; Head: ffffff88c0f86a800; Data: fffff887f5f86a850; Tail: 0x88; End: 0x2c0; Device: pim6reg. ----------- Cut here...

Astra Linux – Vulnerability in dpdk

NVIDIA’s distribution of the Data Plane Development Kit MLNXDPDK contains a vulnerability in the network stack, where error recovery is not handled properly. This vulnerability can allow a remote attacker to cause denial of service, as well as affect data integrity and confidentiality...

CVE-2026-74550

A flaw was found in the kernel. When the network stack fails to allocate a peer entry, it can send un-rate-limited Internet Control Message Protocol ICMP or Neighbor Discovery NDISC Redirect messages. This can be exploited by a remote attacker to cause an uncontrolled flood of network traffic,...

Linux Distros Unpatched Vulnerability : CVE-2026-74431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: Fix potential infinite loop in rxrpcrecvmsg Fix the wait in rxrpcrecvmsg also take check the oob queue. CVE-2026-74431 Note that Nessus relies on the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100359 advisory. In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported several skb corruptions...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099721)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099721 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset,...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099917)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099917 advisory. In the Linux kernel, the following vulnerability has been resolved: nexthop: fix IPv6 route referencing IPv4 nexthop syzbot reported a panic 1 2. When an IPv6 nextho...

CVE-2026-74577

In the Linux kernel, the following vulnerability has been resolved: net: mpls: initialize rtmtos in mplsgetroute mplsgetroute builds the RTMNEWROUTE reply to an RTMGETROUTE request by filling a struct rtmsg allocated from an skb whose data area is not zeroed allocskbNLMSGGOODSIZE, .... It sets...

CVE-2026-74319

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix deadlock waiting for ticket during data relocation When performing data relocation on a zoned filesystem, BTRFS can deadlock in handlereservetickets. The relocation process is waiting on a space reservation tick...

CVE-2026-72065 net: mana: Validate the packet length reported by the NIC

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted...

Linux Distros Unpatched Vulnerability : CVE-2026-74569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the size change of each NAT-rewritten SIP message in s16 diff and...

SUSE CVE-2026-68426

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb-prev after async crypto steals a GSO segment skbgsosegment leaves the segment list head with -prev pointing at the last segment, an invariant validatexmitskblist relies on when it sets its tail pointer tail =...