Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Firewire: In the net subsystem, a bug related to use-after-free was fixed in the fwnetfinishincomingpacket function. The netifrx function frees the skb, but we cannot dereference it to save the skb-len...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: L2CAP: Fixed type confusion in l2capecredreconfrsp The function l2capecredreconfrsp casts the incoming data into the struct l2capecredconnrsp an ECRED connection response, 8 bytes long, with the result at offset 6,...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc95xx: Limit packet length to skb-len The packet length retrieved from the descriptor may be larger than the actual socket buffer length. In such cases, the cloned skb passed up the network stack may leak kernel memo...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: devmap: provide rxq after redirect The rxq structure contains a pointer to the device from which the redirect occurred. Currently, the BPF program that is executed after a redirect via BPFMAPTYPEDEVMAP does not set this...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Packet: Annotate data-races around ignoreoutgoing The function ignoreoutgoing is accessed without a lock from devqueuexmitnit and packetgetsockopt. Add appropriate READONCE/WRITEONCE annotations. Syzbot reported: BUG: KCSAN:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtl818x: rtl8187: Fixed a potential buffer underflow in rtl8187rxcb. The rtl8187rxcb function calculates the RX descriptor header address by subtracting its size from the skbtailptr. However, it does not validate whether th...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix for checking attempts to corrupt spilled pointers When a register is spilled onto a stack as a 1/2/4-byte register, we set slottypeBPFREGSIZE - 1 plus possibly a few more bytes depending on the actual spill size...

Threaded-CVE-2018-15473

CVE-2018-15473 — Herramienta de Enumeración de Usuarios SSH Una reimplementación en Python 3 del clásico exploit de enumeración de usuarios de OpenSSH CVE-2018-15473, ampliado con multihilo, soporte de listas de palabras, detección automática de vulnerabilidades y parcheo de exploit seguro para...

phantom-grid

Phantom Grid - Enterprise Zero Trust Network Access ZTNA Phantom Grid is a next-generation Zero Trust Network Access ZTNA and active defense system. It operates at both the Kernel Level eBPF and Application Level mTLS to transform Linux servers into a robust, deceptive attack surface. Built for...

CVE-2018-10933

Desafío CTF de prueba de concepto Por Silas Springer Basado en CVE-2018-10933 Antecedentes CVE-2018-10933 es una vulnerabilidad descubierta en versiones selectas de libSSH, que puede permitir acceso potencialmente ilimitado a la máquina. La vulnerabilidad surge del manejo incorrecto de los...

ddos-traffic-monitor

Monitor de Tráfico DDoS Una herramienta de monitoreo de tráfico en tiempo real que detecta y muestra el volumen de tráfico de red por dirección IP para identificar posibles ataques DDoS. La herramienta está construida con Python 2.7 usando Flask como backend y un frontend basado en web para la...

The vulnerability of the RDP packet processing handler in the XRDP server allows a attacker to trigger a service failure.

The vulnerability of the RDP packet processing module in the XRDP server is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3554)

A vulnerability in the TCP packet processing of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a memory...

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3305)

A vulnerability in the implementation of the Border Gateway Protocol BGP module in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to...

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3306)

A vulnerability in the DHCP module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to incorrect processing ...

Cisco ASA Improper Input Validation (CVE-2019-1687)

A vulnerability in the TCP proxy functionality for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to restart unexpectedly, resulting in a denial of service DoS condition. The...

CVE-2020-0796

CVE-2020-0796 Un PoC y escáner aún más simple para CVE-2020-0796, ya que utiliza paquetes estáticos. Hay una protección para evitar el uso accidental en direcciones IP públicas no hagas eso y un interruptor de encendido/apagado para activar el bloqueo. ¡Solo requiere Python 3 básico! Modo de...

external_tcpdump_AOSP10_r33_CVE-2019-15166

tcpdump Para reportar un problema de seguridad, por favor envía un correo electrónico a [email protected]. Para reportar errores y otros problemas, contribuir parches, solicitar una funcionalidad, proporcionar comentarios genéricos, etc., consulta el archivo CONTRIBUTING en la raíz del árbol...

CVE-2022-31491

CVE-2022-31491 Módulo de Metasploit y archivos PoC en este repositorio. Más información Voltronic Viewpower/Pro y remarcas/derivados El software de gestión de SAI normalmente permite a un usuario debidamente autenticado y autorizado, mediante una interfaz web, configurar el sistema para ejecutar ...

open-ssh-user-enumeration

Script de Enumeración de Nombres de Usuario de OpenSSH CVE-2018-15473 Este script verifica la vulnerabilidad de enumeración de nombres de usuario en OpenSSH 7.7 y anteriores CVE-2018-15473. Envía un paquete de autenticación malformado e interpreta la respuesta del servidor SSH para identificar...