wildpwn

First things first! Read: https://www.exploit-db.com/papers/33930/ Basic usage It goes something like this: usage: wildpwn.py -h --file FILE payload folder Tool to generate unix wildcard attacks positional arguments: payload Payload to use: combined | tar | rsync folder Where to write the payload...

CVE-2026-119741

A flaw was found in rsync. An unauthenticated remote attacker can cause a Denial of Service DoS by sending crafted checksum sequences during delta file transfers to a public rsync server. This flaw forces the server to perform excessive checksum computations across consecutive data offsets, leadi...

SUSE CVE-2026-119741

rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

CVE-2026-119741

rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

Linux Distros Unpatched Vulnerability : CVE-2026-119741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger...

AZL-112646 CVE-2026-119741 affecting package rsync 3.5.1-1

rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

DEBIAN-CVE-2026-119741

rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

CVE-2026-119741

rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

CVE-2026-119741 rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions

rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

CVE-2026-119741 rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions

rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

CVE-2026-119741 rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions

rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

CVE-2026-119741

Rsync versions through 3.5.1 are vulnerable to a Denial of Service (DoS) via checksum collisions in the delta-transfer sender's hash_search() function located in match.c . The root cause involves an Inefficient Algorithmic Complexity (CWE-407) where unauthenticated attackers pulling from a public...

EUVD-2026-115914

rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

CVE-2026-119741

rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

rsync: Fix of 2 CVEs

CVE-2026-29518: re-implement the "use chroot = no" confinement after the centos7els fix: every path operation proves its parent directory beneath the pinned module root through /proc/self/fd and runs on it with the at calls. In-module symlinks, directories the daemon uid may search but not read,...

PT-2026-136254

Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.2 Description A denial of service issue exists in the delta-transfer sender's hash search function within match.c. Unauthenticated attackers pulling from a public daemon module can trigger unbounded strong-checksum...

CVE-2026-119741: RsyncProject rsync: rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c…

rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...

net/rsync -- denial of service

VulnCheck reports: rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module ca...

CentOS Linux 8.4 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1793724456)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793724456 advisory. - Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handling that allows...

CentOS Linux 8 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1793724443)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1793724443 advisory. - Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handling that allows...