95 matches found
pig
Pig Pig que puede entenderse como Packet intruder generator es una herramienta de creación de paquetes para Linux. Puedes usar Pig para probar tu IDS/IPS, entre otras cosas. Pig incluye un conjunto de firmas de ataque conocidas listas para usar y puedes ampliar esta colección con cosas más...
CVE-2024-38063-poc
Real POC publicado en https://github.com/ynwarcs/CVE-2024-38063 y también lo he actualizado en mi código. Esto puede causar un bloqueo en tu sistema, así que usa una máquina virtual o solo con fines de aprendizaje. Puedes obtener RCE haciendo cambios en el código. Uso iface Lo más probable es que...
pysap
pysap - Python library for crafting SAP's network protocols packets Version 0.2.2.dev0 in dev Overview SAP Netweaver and SAP HANA are technology platforms for building and integrating SAP business applications. Communication between components uses different network protocols and some services an...
CVE-2024-38063-Exploit-Refactoring
Exploit CVE-2024-38063 Herramienta de explotación avanzada con manejo de errores de precisión y ejecución conforme a DO-176C. Resumen Esta es una herramienta especializada de evaluación de seguridad para probar la mitigación de vulnerabilidades IPv6 de Windows en sistemas objetivo. Incluye...
laf
LoRaWAN Auditing Framework - VERSIÓN ALPHA Las implementaciones de IoT siguen creciendo y una parte de ese crecimiento significativo está compuesta por millones de sensores LPWAN red de área amplia de baja potencia desplegados en cientos de ciudades Smart Cities alrededor del mundo, también en...
nemesis
N E M E S I S - Creación e Inyección El Proyecto Nemesis está diseñado para ser una pila IP humana portátil basada en línea de comandos para sistemas tipo UNIX y Windows. El conjunto está dividido por protocolo y debería permitir la creación de scripts útiles de paquetes inyectados desde simples...
CVE-2026-13584 Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module, MELSEC iQ-L Series Motion Module,...
Impacket 0.13.1
Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to the packets and, for some protocols e.g. SMB1-3 and MSRPC, the protocol implementation itself. Packets can be constructed from scratch, as well as parse...
CVE-2026-8686 DoS from MQTT v5.0 Deserialization Fault in core MQTT
Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet. To remediate this issue, users should upgrade to v5.0.1...
CVE-2026-7164
Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic. Remote attackers can craft packets which cause affected systems to panic. This affects any system where pf is configured to process traffic, independent...
CVE-2026-31683
A flaw was found in the batman-adv module of the Linux kernel. This vulnerability arises when the Optimized Global Messaging OGM aggregation state is dynamically altered, leading to insufficient buffer space skb tailroom for network packets. A remote attacker could exploit this condition by sendi...
CVE-2026-4247
A memory leak vulnerability exists in the FreeBSD TCP stack within the tcp_respond() function. When the system decides not to send a challenge ACK, the function returns without consuming the passed mbuf , leading to a memory leak. An attacker who can establish a TCP connection or is on-path can c...
PT-2026-28217
When a challenge ACK is to be sent tcp respond constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function returns and leaks the mbuf. If an attacker is either on path with an established TCP connection, or can themselves...
EUVD-2026-13844
Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impersonate the WebCTRL service without requiring code injection into the WebCTRL software...
CVE-2026-25086
Under certain conditions, an attacker could bind to the same port used by WebCTRL. This could allow the attacker to craft and send malicious packets and impersonate the WebCTRL service without requiring code injection into the WebCTRL software...
CVE-2026-20015
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may impact the availability of services to devices elsewhere in the network. This...
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
CVE-2024-38063 Exploit Advanced exploitation tool with precis...
MiracleLinux 3 : wireshark-1.0.15-1.3.0.1.AXS3 (AXSA:2011-03:01)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-03:01 advisory. Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library, contains...