187 matches found
printerbugnew
Pure RPC over TCP プリンタスプーラートリガー Windows 11 22H2+ / Windows Server 2025 向け 使用方法 printerbugnew.py username password domain attackerhost tcpport 使用例 匿名接続 printerbugnew.py 192.168.1.100 資格情報を使用 printerbugnew.py 192.168.1.100 admin Password123 DOMAIN 別ホスト（攻撃者）へのバックコネクトをトリガー printerbugnew.py...
CVE-2026-0073-Android-adbd-authentication-bypass
Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should wo...
smbtakeover
smbtakeover Windows에서 드라이버를 로드하거나 LSASS에 모듈을 로드하거나 대상 머신을 재부팅하지 않고 445/tcp를 바인딩 해제하고 다시 바인딩하는 기술입니다. C2를 통해 운영하는 동안 SMB 기반 NTLM 릴레이의 부담을 덜기 위해 구현되었습니다. 이 기술에 대한 기술적 분석은 x33fcon에서 진행된 Relay Your Heart Away: An OPSEC Concious Approach to 445 Takeover 프레젠테이션에서 자세히 논의됩니다. PoC는 Python과 BOF 형식으로 작성되었습니...
adbHijacker
CVE-2026-0073 — Android ADB TLS 인증 우회 CVE-2026-0073 에 대한 개념 증명 익스플로잇 및 네트워크 스캐너입니다. 이는 Android adbd의 ADB-over-TCP 인증 경로에서 발생하는 치명적인 제로클릭사용자 상호작용 불필요 원격 코드 실행 취약점입니다. 이 취약점은 adbdtlsverifycertdaemon/auth.cpp의 로직 버그로, EVPPKEYcmp가 불리언 조건문으로 처리되는 데서 발생합니다. 저장된 RSA 키가 비-RSA TLS 클라이언트 인증서EC P-256 또는...
EUVD-2026-81143
A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the...
CVE-2026-20248 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability
A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the...
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability
A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the...
CVE-2026-20248: Signed to Unsigned Conversion Error
A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, causing the...
CVE-2026-80789
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data length before allocating command buffers nvmettcpmapdata reads the host-controlled 32-bit sgl-length and, for the in-capsule offset descriptor type 0x01, checks it against port-inlinedatasize before use...
Linux Distros Unpatched Vulnerability : CVE-2026-80789
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: bound SGL data length before allocating command buffers nvmettcpmapdata reads the host- controlled 32-bit sgl-length and, for the in-capsule offset...
Fedora 43 : unbound (2026-3170ee6a1c)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3170ee6a1c advisory. Update to 1.25.2 rhbz2506061 Security fixes: - Fix CVE-2026-14586, Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC...
kernel: nvmet-tcp: fix race between ICReq handling and queue teardown
A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. A race condition exists between the handling of an Initialization Connection Request ICReq and the teardown of a queue. A remote attacker, by sending an ICReq and immediately closing the connection, could trigger a...
CVE-2026-64535
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data digest is enabled on an NVMe/TCP connection and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based data...
PT-2026-64859
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the nvmet-tcp module. When data digest is enabled on an NVMe/TCP connection and a digest mismatch occurs on a non-final H2C DATA PDU during an...
kernel: nvmet-tcp: fix race between ICReq handling and queue teardown
A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. A race condition exists between the handling of an Initialization Connection Request ICReq and the teardown of a queue. A remote attacker, by sending an ICReq and immediately closing the connection, could trigger a...
EUVD-2026-46456
Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result i...
kernel: nvmet-tcp: fix race between ICReq handling and queue teardown
A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. A race condition exists between the handling of an Initialization Connection Request ICReq and the teardown of a queue. A remote attacker, by sending an ICReq and immediately closing the connection, could trigger a...
kernel: nvmet-tcp: fix race between ICReq handling and queue teardown
A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. A race condition exists between the handling of an Initialization Connection Request ICReq and the teardown of a queue. A remote attacker, by sending an ICReq and immediately closing the connection, could trigger a...
kernel: nvmet-tcp: fix race between ICReq handling and queue teardown
A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. A race condition exists between the handling of an Initialization Connection Request ICReq and the teardown of a queue. A remote attacker, by sending an ICReq and immediately closing the connection, could trigger a...
kernel: nvmet-tcp: fix race between ICReq handling and queue teardown
A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. A race condition exists between the handling of an Initialization Connection Request ICReq and the teardown of a queue. A remote attacker, by sending an ICReq and immediately closing the connection, could trigger a...