Samba-CVE-2021-44142

Verificatore di Vulnerabilità CVE-2021-44142 Uno strumento per verificare se un server Samba è vulnerabile a CVE-2021-44142 Contesto CVE-2021-44142 è una lettura e scrittura heap out-of-bounds nel modulo vfsfruit di Samba, sfruttata al Pwn2Own Austin 2021 contro il Western Digital PR4100. È stata...

CVE-2025-10230

CVE-2025-10230 PoC per CVE-2025-10230 - Iniezione di comandi nella hook di Samba WINS La configurazione richiesta per questa vulnerabilità probabilmente non riguarda nessuno. L'iniezione è limitata a 15 caratteri e deve essere un nome WINS valido, quindi niente ;...

smb-usermap

Samba "username map script" تنفيذ الأوامر تستغل هذه الوحدة ثغرة تنفيذ أوامر في إصدارات Samba من 3.0.20 إلى 3.0.25rc3 عند استخدام خيار الإعدادات غير الافتراضي "username map script". من خلال تحديد اسم مستخدم يحتوي على محارف شل shell meta characters، يمكن للمهاجمين تنفيذ أوامر عشوائية. لا يلزم أي...

cdt-samba-deploy

cdt-samba-deploy Playbook Ansible CDT per distribuire la CVE-2017-7494, nota anche come "SambaCry", su una macchina Ubuntu...

cdt-vulnsamba-deploy

CDT Team Delta - Distribuzione Samba Vulnerabile Panoramica Questo repository è un deployment basato su Ansible di un server Samba vulnerabile affetto da CVE-2017-7494, una vulnerabilità critica di esecuzione remota di codice. Dovrebbe essere distribuito per il team Delta durante la fase Grey Tea...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.54 bug fix and security update

Red Hat OpenShift Container Platform release 4.18.54 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...

ROOT-OS-DEBIAN-12-CVE-2025-10230 CVE-2025-10230 in samba - Patched by Root

Root has patched CVE-2025-10230 in the samba package for Root:Debian:12. Multiple fixed versions available...

smbexec

root@kitploit: smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: Fixed a use-after-free issue in Kerberos authentication. The introduction of sess-user = NULL was necessary to fix the dangling pointer created by ksmbdfreeuser. However, it is possible that another thread might be...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: A out-of-bounds write vulnerability has been fixed in ksmbdvfsstreamwrite. The offset from the client can be a negative value, which may allow writing data beyond the boundaries of the allocated buffer...

Astra Linux – Vulnerability in Samba

A flaw was discovered in the Samba AD LDAP server. The AD DC database audit logging module can access values of LDAP messages freed by a preceding database module, leading to a use-after-free issue. This issue only occurs when certain privileged attributes are modified, such as userAccountControl...

Astra Linux – Vulnerability in Samba

Samba does not validate the Validated-DNS-Host-Name property for the dNSHostName attribute, which may allow unprivileged users to modify it...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fixed the UAF issue in ksmbdtcpnewconnection. The race that occurs is between the process of handling a new TCP connection and its disconnection. This causes a UAF error in the struct tcptransport structure within the...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ksmbd: The issue related to “slab-use-after-free” in smb3preauthhashrsp has been fixed. The function ksmbdusersessionput should be called under smb3preauthhashrsp. This will prevent freeing the session before calling...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users’ passwords, allowing for full domain takeover...

Astra Linux – Vulnerability in Samba

A flaw was discovered in the way Samba maps domain users to local users. An authenticated attacker could exploit this flaw to cause potential privilege escalation...

Astra Linux – Vulnerability in Samba

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability...

Astra Linux – Vulnerability in cifs-utils

It was discovered that cifs-utils’ mount.cifs function invoked a shell when requesting the Samba password, which could be exploited to inject arbitrary commands. An attacker who had special permissions, such as those through sudo rules, could use this vulnerability to escalate their privileges...

Astra Linux – Vulnerability in Samba

A null pointer dereference flaw was detected in Samba’s Winbind service in versions prior to 4.11.15, before 4.12.9, and before 4.13.1. A local user could exploit this flaw to crash the Winbind service, resulting in a denial of service...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. Users of Samba AD can cause the server to access uninitialized data through an LDAP add or modify request, typically resulting in a segmentation fault...