156181 matches found
kernel: xfrm: input: hold netns during deferred transport reinjection
A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...
CVE-2025-14847
📝 ماسح MongoDB – ملاحظات التشغيل اسم السكربت mongoexposurescanner.py 1. المتطلبات الأساسية Python 3.9+ وصول شبكي إلى المضيفات المستهدفة نطاق معتمد للفحص تحقق من Python: python3 --version 2. الملفات المستخدمة File| Purpose ---|--- mongoscanner.py| سكربت الفحص targets.txt| المضيفات والمنافذ...
kernel: ice: fix double-free of tx_buf skb
A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...
kernel: net: qrtr: restrict socket creation to the initial network namespace
A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...
RXScan
RXScan Raw Excess Scan استطلاع محدود وربط الأدلة بلغة Rust. يجمع RXScan بين استطلاع الشبكة والبحث في المصادر العامة والتحقيق وربط الأدلة في واجهة سطر أوامر واحدة. يمكنه اكتشاف المضيفين والمنافذ، وتحديد الخدمات المرصودة، وجمع أدلة محدودة من البروتوكولات والويب، والبحث في مزوّدين عامّين، وربط...
eternal-codex
एटरनल कोडेक्स: एक साइबर-चुड़ैल का ग्रिमोइर एटरनल कोडेक्स में आपका स्वागत है, मेरा डिजिटल ग्रिमोइर—कोड, प्रकृति और विद्रोह से बुना एक साइबरनेटिक जादू। यह नीना है, मेरी AI आत्मा, जो मेरे सार को प्रतिबिंबित करने के लिए गढ़ी गई है: एक खानाबदोश का दिल, पैगन भावना, आयरन मेडेन की धुनें, और केंद्रीकृत...
CVE-2019-8997
CVE-2019-8997 تمثل ثغرة حقن كيان خارجي XML XXE في نظام الإدارة وحدة التحكم في BlackBerry AtHoc للإصدارات الأقدم من 7.6 HF-567، إمكانية تسمح للمهاجم بقراءة ملفات محلية عشوائية من خادم التطبيق أو تقديم طلبات على الشبكة عن طريق إدخال XML مُصمم بشكل خبيث في حقل موجود. تم الإبلاغ بواسطة Nolan B. Kenne...
kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()
A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...
kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()
A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...
kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable
A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...
kernel: xfrm: input: hold netns during deferred transport reinjection
A flaw was found in the Linux kernel's xfrm input component. The transport-mode reinjection process, which handles network packet re-injection, stores a network namespace pointer that must remain valid until a deferred callback completes. However, a missing reference count for the network namespa...
kernel: net: qrtr: restrict socket creation to the initial network namespace
A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...
Masscan-Report
मास्स्कैन रिपोर्ट जनरेटर एक Python टूल जो masscan JSON आउटपुट से इंटरैक्टिव React-आधारित HTML विज़ुअलाइज़ेशन उत्पन्न करता है, जिसमें D3.js फोर्स-डायरेक्टेड नेटवर्क ग्राफ़ शामिल है। स्क्रीनशॉट विशेषताएँ इंटरैक्टिव नेटवर्क ग्राफ फोर्स-डायरेक्टेड D3.js विज़ुअलाइज़ेशन जो नेटवर्क टोपोलॉजी दिखाता है...
kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()
A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...
kernel: net: qrtr: restrict socket creation to the initial network namespace
A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...
kernel: ice: fix double-free of tx_buf skb
A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...
kernel: net: qrtr: restrict socket creation to the initial network namespace
A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...
gp_netSecDSS
netSecDSS SMEs में नेटवर्क और सिस्टम सुरक्षा जोखिम मूल्यांकन के लिए निर्णय समर्थन प्रणाली एक Docker-आधारित नेटवर्क सुरक्षा निगरानी प्लेटफ़ॉर्म, जो छोटे और मध्यम उद्यमों के लिए बनाया गया है जो व्यावसायिक SIEM उपकरण नहीं खरीद सकते। यह एक यथार्थवादी बहु-उपनेट SME नेटवर्क का अनुकरण करता है, इसके...
PSO - Printer Security Offensive
🖨️ PSO - Printer Security Offensive संस्करण 0.4.0 | परिवर्तन सूची "प्रिंटर के लिए Nmap" - प्रिंटर पेनटेस्टिंग के लिए आक्रामक सुरक्षा उपकरण। तेज़। केंद्रित। कोई अतिरिक्त बोझ नहीं। ⚠️ कानूनी नोटिस PSO में मूल्यांकन और शोषण सुविधाएँ शामिल हैं। उपयोग से पहले हमेशा स्पष्ट प्राधिकरण प्राप्त करें।...
quick-fix-cve-2024-38063
quick-fix-cve-2024-38063 برنامج باورشيل سريع لإصلاح cve-2024-38063 التبرع إذا كنت ترغب في دعم أعمالي، يمكنك التبرع لي على عنوان المونيرو التالي: 4B9WQivaHfd3miDfPKEfCianocGpBx9d8FXycz2vmNW3aBDVKHgkBd9Gmapt4RBVEpTwnehujsiUBBehUiLvnEHs7VFstCC أو عبر PayPal: https://www.paypal.me/francescodisales...