425 matches found
VMware_ESXI_OpenSLP_PoCs
VMwareESXIOpenSLPPoCs CVE-2020-3992 & CVE-2019-5544 Tested on ESXI installed on VMware Workstation. If on real mechine, you may need to change the srvtype field service:VMwareInfrastructure...
CVE-2019-5544_CVE-2020-3992
SLP 서비스 스캐너 CVE-2019-5544 CVE-2020-3992 SRVLOC/SLP 프로토콜을 구현하여 활성화된 OpenSLP 서비스를 스캔하는 Python 스크립트입니다. CVE-2019-5544, CVE-2020-3992 또는 CVE-2021-21974의 영향을 받는 시스템을 검색할 때 유용하게 사용할 수 있습니다... VMware 취약점에 대한 자세한 정보는 예를 들어 다음에서 확인할 수 있습니다:...
CVE-2021-21974
CVE-2021-21974 PoC - VMware ESXi RCE Exploit Описание Этот репозиторий содержит Proof of Concept PoC для уязвимости CVE-2021-21974 , уязвимости удаленного выполнения кода RCE в службе OpenSLP VMware ESXi. Успешная эксплуатация может позволить неаутентифицированному атакующему выполнить произвольн...
CVE-2021-21974
CVE-2021-21974 VMware ESXi OpenSLP Heap Overflow Remote Code Execution PoC Author: Aiyakami Overview CVE-2021-21974 is a heap overflow vulnerability in the OpenSLP service in VMware ESXi. An unauthenticated attacker can send specially crafted packets over the network to the target ESXi host's SLP...
MiracleLinux 4 : openslp-2.0.0-4.AXS4 (AXSA:2020-049:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-049:01 advisory. openslp: Heap-based buffer overflow in ProcessSrvRqst in slpdprocess.c leading to remote code execution CVE-2019-5544 CVE-2019-5544 OpenSLP as used in ESXi an...
MiracleLinux 7 : openslp-2.0.0-8.el7 (AXSA:2019-4405:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4405:01 advisory. openslp: Heap-based buffer overflow in ProcessSrvRqst in slpdprocess.c leading to remote code execution CVE-2019-5544 Tenable has extracted the preceding...
MiracleLinux 4 : openslp-2.0.0-3.AXS4 (AXSA:2018-3270:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-3270:01 advisory. openslp: Heap memory corruption in slpd/slpdprocess.c allows denial of service or potentially code execution CVE-2017-17833 Tenable has extracted the precedi...
MiracleLinux 7 : openslp-2.0.0-7.el7 (AXSA:2018-3271:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3271:01 advisory. openslp: Heap memory corruption in slpd/slpdprocess.c allows denial of service or potentially code execution CVE-2017-17833 Tenable has extracted the precedi...
EUVD-2015-5178
Malware in sbrugna...
EUVD-2016-5887
Malware in sbrugna...
EUVD-2017-8983
Malware in sbrugna...
EUVD-2005-0770
Malware in sbrugna...
EUVD-2003-0865
Malware in sbrugna...
EUVD-2021-9166
Malicious code in bioql PyPI...
The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service
...
CVE-2021-21995
OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue. A malicious actor with network access to port 427 on ESXi may be able to trigger a heap out-of-bounds read in OpenSLP service resulting in a denial-of-service condition...
CVE-2020-3992
OpenSLP as used in VMware ESXi 7.0 before ESXi7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free...
Advisory ROSA-SA-2025-2659
software: openslp 2.0.0 WASP: ROSA-CHROME packageevrstring: openslp-2.0.0 CVE-ID: CVE-2016-4912 BDU-ID: None CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in OpenSLP allows remote attackers to cause a denial of service via a large number of specially crafted packets. CVE-STATUS: The vulnerability...