impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket は元々 SecureAuth によって作成され、現在は Fortra の Core Security がメンテナンスしています。 Impacket はネットワークプロトコルを扱うための Python クラス群です。Impacket はパケットへの低レベルなプログラムアクセスを提供することに重点を置いており、一部のプロトコル（例：SMB1-3 や...

o3_finds_cve-2025-37899

This is the artefact repository associated with my blog post How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation. See that post for details...

o3_finds_cve-2025-37899

に基づく LinuxカーネルのSMB実装におけるリモートゼロデイ脆弱性CVE-2025-37899をo3を使って発見した方法 ターゲット脆弱性 ollama 脆弱性 CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34 https://github.com/ollama/ollama/compare/v0.1.33...v0.1.34 コミット: 2a21363 以下のように llm CLI を使用する root@kitploit: pip install llm llm keys set openai...

EUVD-2015-5837

Malware in sbrugna...

EUVD-2017-3993

Malware in sbrugna...

PT-2025-22161

Name of the Vulnerable Software and Affected Versions: Linux kernel Description: A use-after-free vulnerability exists in the ksmbd module of the Linux kernel, specifically in the smb2 sess setup function. This flaw could allow a remote attacker to cause a denial of service. The vulnerability was...

Moderate: Red Hat Security Advisory: samba security update

An update for samba is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

CVE-2015-5891

CVE-2015-5891 affects the SMB implementation in the Apple OS X kernel prior to 10.11. It allows local users to gain privileges or cause a denial of service via memory corruption (unspecified vectors). Base score 7.2 (HIGH). No exploitation status or detailed fix provided in the connected documents.

Race condition

Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 Negotiate packet, aka "SMB...

Null pointer dereference

The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allo...

Authentication flaw

The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain...

Buffer overflow

The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to...

CVE-2010-0020

The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to...

CVE-2010-0231

The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain...

CVE-2010-0021

Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 Negotiate packet, aka "SMB...

CVE-2010-0021

Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service system hang via a crafted 1 SMBv1 or 2 SMBv2 Negotiate packet, aka "SMB...

MS02-045: Unchecked buffer in Network Share Provider (326830)

Due to a flaw in Microsoft's SMB implementation, the remote host is vulnerable to a denial of service attack. By sending a specially crafted packet request, an attacker could launch a denial of service, causing the affected host to crash. Note that this vulnerability is not exploitable without...