CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys version 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...

CVE-2022-30136

CVE-2022-30136 Windows Network File System Remote exploit PoC author: Ricardo Narvaja For demonstration purposes only. Complete exploit works on vulnerable Windows Server systems. Checkout the writeup Analysis of CVE-2022-30136 “Windows Network File System Vulnerability“. Usage Analysis of...

CVE-2026-45766

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...

CVE-2026-45766 Suricata nfs: unbounded stateful structures can lead to resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...

CVE-2026-45766

Suricata (network IDS/IPS/NMS engine) is affected by a resource exhaustion flaw in its NFS parser . Prior to versions 7.0.16 and 8.0.5 , certain NFS parser state structures were insufficiently bounded, allowing crafted NFS traffic to cause Suricata to consume excessive memory , potentially leadin...

sharesniffer

sharesniffer sharesniffer es una herramienta de análisis de red para encontrar recursos compartidos de archivos abiertos y cerrados en tu red local. Incluye descubrimiento automático de red y montaje automático de cualquier recurso compartido cifs y nfs abierto. Cómo usar Ejemplo para encontrar...

NfSpy

NfSpy - an ID-spoofing NFS client by Daniel Miller NfSpy is a Python library for automating the falsification of NFS credentials when mounting an NFS share. Included are two client programs: nfspy uses the Filesystem in Userspace FUSE library to mount an NFS share in Linux. This allows the use of...

Vulnerabilities in Microsoft Windows

Microsoft has identified 666 vulnerabilities in Windows. Malicious actors can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. Microsoft has identified 666 vulnerabilities in Windows. The 32 most severe vulnerabilities are...

CVE-2026-83989

Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network...

CVE-2026-78445

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-73024

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-71334

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally...

CVE-2026-71330

Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network...

CVE-2026-70585

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally...

CVE-2026-69595

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...

EUVD-2026-73912

Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network...

CVE-2026-83989

CVE-2026-83989 is an out-of-bounds read in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthenticated, remote attacker to cause a denial of service over a network. The vulnerability is rated CVSS 7.5 (HIGH) with a network attack vector, low complexity, no privileges or user int...

EUVD-2026-73812

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-69595

CVE-2026-69595 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. Microsoft rated it CRITICAL (CVSS 3.1: 9.8) with low attack complexity and no user interactio...

CVE-2026-78445

CVE-2026-78445 is a use-after-free vulnerability in the Windows Services for NFS ONCRPC XDR Driver , allowing an unauthorized attacker to execute code over a network. Microsoft rates it CVSS 9.8 (Critical) with no privileges required and no user interaction. The vulnerability affects the ONCRPC X...