6517 matches found
HTB-Enigma-walkthrough
Enigma - Hack The Box Writeup 📋 Machine Information Name: Enigma Difficulty: Medium OS: Linux Ubuntu IP: 10.129.115.67 Completion date: October 9, 2026 🔍 Reconnaissance 1. Connection and Nmap We connect to the HTB VPN and run a full port scan: nmap -sC -sV -Pn 10.129.115.67 Scan results: - 22/tcp...
NfSpy
NfSpy - an ID-spoofing NFS client by Daniel Miller NfSpy is a Python library for automating the falsification of NFS credentials when mounting an NFS share. Included are two client programs: nfspy uses the Filesystem in Userspace FUSE library to mount an NFS share in Linux. This allows the use of...
CVE-2022-26937
CVE-2022-26937 A package to detect CVE-2022-26937, a vulnerability in Microsoft's NFS implementation. Example You can run this logic on the included PCAP in the testing\traces directory: $ zeek -Cr CVE-2022-26937-exploited.pcap /Source/CVE-2022-26937/scripts/load.zeek $ cat notice.log separator...
CVE-2022-30136
CVE-2022-30136 Windows Network File System Remote exploit PoC author: Ricardo Narvaja For demonstration purposes only. Complete exploit works on vulnerable Windows Server systems. Checkout the writeup Analysis of CVE-2022-30136 “Windows Network File System Vulnerability“. Usage Analysis of...
CVE-2022-34715-POC
CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys version 10.0.20348.825 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9 r8=0000001000000020...
Enigm-Writeup
Hack The Box: Enigma - Comprehensive Penetration Testing & Write-Up Report 1. Executive Summary Enigma is an intermediate-level Linux machine hosted on Hack The Box. The assessment methodology follows a standard penetration testing lifecycle: reconnaissance, enumeration, initial access via...
cve-2026-43687
CVE-2026-43687 — Reverse engineering notes and reproduction Independent reverse engineering of the macOS NFS client access-cache race CVE-2026-43687, plus a working PoC that triggers the race and captures it live with dtrace. The bug is an unsynchronized read of the nfsnode access-cache pointer i...
CVE-2026-84568
A public, source-guided analysis of CVE-2026-84568 and CVE-2026-84570, with reversible proofs for LDAP/OD input, NFS delivery, helper dispatch, Gatekeeper behavior, and the device-node boundary. Publication status — October 2026. Apple fixed both vulnerabilities on September 14, 2026 in macOS...
kernel: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
A flaw was found in the Linux kernel's sunrpc component, which affects TLS-enabled Network File System NFS servers. A race condition exists during the asynchronous TLS handshake process. A remote attacker could exploit this by closing a connection at a specific time, leading to memory corruption...
CVE-2022-22029-NFS-Server-
Windows Network File System Remote Code Execution Vulnerability CVE-2022-22039 To successfully exploit this vulnerability, an attacker must succeed in a race condition. Making an unauthenticated, carefully constructed call to a Network File System NFS service could be used to exploit this...
kernel: sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
A flaw was found in the Linux kernel's sunrpc component, which affects TLS-enabled Network File System NFS servers. A race condition exists during the asynchronous TLS handshake process. A remote attacker could exploit this by closing a connection at a specific time, leading to memory corruption...
Vulnerabilities in Microsoft Windows
Microsoft has identified 666 vulnerabilities in Windows. Malicious actors can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. Microsoft has identified 666 vulnerabilities in Windows. The 32 most severe vulnerabilities are...
CVE-2026-95885
Use after free in Windows Client for NFS allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-88249
Use after free in Windows Client for NFS allows an unauthorized attacker to execute code over a network...
CVE-2026-122165
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...
CVE-2026-119404
Improper access control in Windows Client for NFS allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-118141
Stack-based buffer overflow in Windows Client for NFS allows an unauthorized attacker to execute code over a network...
CVE-2026-118138
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Client for NFS allows an authorized attacker to elevate privileges locally...