cyber-decoy

cyber-decoy Контейнеризированная сетевая приманка honeypot, которая рекламирует SSH , RDP и SMB , наблюдает за каждым входящим соединением с помощью eBPF и обратным прокси-сервером перенаправляет каждый сеанс в изолированный контейнер-приманку. Архитектура разделяет две задачи: 1. Наблюдение...

CVE-2024-38063-POC

Envoi de paquets pour la vulnérabilité IPv6 de corruption de mémoire CVE-2024-38063 Ce script Python est conçu pour envoyer des paquets forgés afin de déclencher des vulnérabilités potentielles de corruption de mémoire CVE-2024-38063. Il utilise la bibliothèque Scapy pour créer et envoyer des...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Удаленное выполнение кода RCE CVE-2021-4045 🔐 "PWNTAPO: Раскрытие внедрения команд в камеры TP-Link Tapo C200 = v1.1.16 Build 211209" 🔓 Читайте об эксплойте на exploit db Это уязвимость внедрения команд, которая затрагивает все версии прошивки камер TP-Link Tapo c200...

CVE-2022-21907

CVE-2022-21907 Описание POC для CVE-2022-21907: Уязвимость удаленного выполнения кода в стеке протокола HTTP. создан Malwareman 2022-09-17. Подробности Уязвимость удаленного выполнения кода в стеке протокола HTTP. Аналогична https://github.com/antx-code/CVE-2021-31166CVE-2021-31166. Эта проблема...

cve-2020-0796

Identifier et atténuer la faille CVE-2020–0796 à la volée CVE-2020-0796 est une vulnérabilité d'exécution de code à distance pre-remote qui réside dans le protocole de communication réseau Server Message Block 3.0 SMBv3, que Microsoft ne résoudra pas dans le cadre du mardi de mars 2020. Utilisati...

kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. A local attacker, with CAPNETADMIN network administration capability in one network namespace, could exploit an incorrect privilege check in the rtnl changelink path. This allows the attacker to modify the...

kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's ip6gre and ip6erspan tunnel drivers. The changelink functions in these drivers do not adequately verify administrative capabilities CAPNETADMIN across different network namespaces. This allows a local attacker, who has CAPNETADMIN in one network namespace bu...

kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's IP Generic Routing Encapsulation ipgre component. This vulnerability allows a local attacker with network administration capabilities in one network namespace to modify a tunnel residing in a different network namespace where they lack privileges. This is du...

CVE-2022-27925

CVE-2022-27925 Description Le 10 mai 2022, Zimbra a publié les versions 9.0.0 patch 24 et 8.8.15 patch 31 pour corriger plusieurs vulnérabilités dans Zimbra Collaboration Suite, notamment CVE-2022-27924 dont nous avons déjà parlé et CVE-2022-27925. À l'origine, Zimbra a qualifié CVE-2022-27925...

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2

CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2 Une vulnérabilité critique d'exécution de code à distance RCE dans MCPJam Inspector 3. Lancer l'exploit python3 CVE-2026-23744.py -u -i -p 4. Pour une meilleure utilisation, je recommande de mettre à jour le terminal vers un terminal pleinement...

Astra Linux – Vulnerability in docker.io

Moby is an open-source container framework developed by Docker Inc. It is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which is...

Astra Linux – Vulnerability in NTP

In the mstolfp.c file within NTP 4.2.8p15, there is a buffer overflow vulnerability when adding a decimal point. An adversary may be able to attack a client’s ntpq process, but they cannot attack the ntpd process...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.72, using the "after free" mechanism in the Network API of Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted Chrome Extension...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: devlink: fixed the netns refcount leak in devlinknlcmdreload. While preparing my patch series that includes netns refcount tracking, I discovered bugs in devlinknlcmdreload. Some error paths failed to release the refcount...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/smc: Reduced Rtnl pressure in smcpnetcreatepnetidslist. Many syzbot reports indicate extreme Rtnl pressure, and many of them suggest that smc acquires Rtnl during the creation of netnames without any valid reason 1. This patc...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: gve: Fixed corruption in the stats report when the number of queues changes. The driver and the Network Interface Card NIC share a memory region for stats reporting. The NIC calculates its offset within this region based on the...

Astra Linux – Vulnerability in NTP

In the file libntp/mstolfp.c, within the NTP 4.2.8p15 version, there is a buffer overflow vulnerability when copying the trailing number. An attacker may be able to exploit this vulnerability against a client’s ntpq process, but they cannot exploit it against ntpd...

Astra Linux – Vulnerability in GraphicsMagick

GraphicsMagick version 1.3.35 has a heap-based buffer overflow in the ReadMNGImage function in the coders/png.c file...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netfs: Only call foliostartfscache once for each folio. If a network filesystem using netfs implements a clamplength function, it can set subrequest lengths that are smaller than the page size. When we loop through the folios in...

Astra Linux – Vulnerability in net-snmp

The handleipv6IpForwarding function in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP version 5.4.3 to 5.9.3 has a NULL Pointer Exception bug. This bug can be exploited by a remote attacker to cause the instance to crash via a crafted UDP packet, resulting in a Denial of Service attack...