ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

CVE-2026-84543

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory...

CVE-2026-84515

CVE-2026-84515 is an out-of-bounds write in Apple macOS, addressed with improved bounds checking. The vulnerability is triggered by connecting to a malicious SMB server , which may lead to kernel memory corruption . The fix is available in macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe...

CVE-2026-84515

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to kernel memory corruption...

EUVD-2026-77884

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

CVE-2026-84536

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

CVE-2026-84536

An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Connecting to a malicious SMB server may lead to unexpected system termination...

CVE-2020-0796

CVE-2020-0796 Windows SMBv3 Exploit de Elevación de Privilegios Locales Autores Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso Referencias https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: smb/server: fixed a potential null-ptr-deref of leasectxinfo in smb2open A null-ptr-deref will occur when reqoplevel == SMB2OPLOCKLEVELLEASE and parseleasestate returns NULL. This issue was fixed by checking whether...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: server: splitting ksmbdrdmastoplistening from ksmbdrdmaDestroy We cannot call destroyworkqueuesmbdirectwq; before stopsessions! Otherwise, existing connections will attempt to use smbdirectwq as a NULL pointer...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP作成: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

CVE-2026-72949

Null pointer dereference in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to deny service over a network...

CVE-2026-69403

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...

CVE-2026-69374

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

EUVD-2026-73481

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-69374

CVE-2026-69374 is a denial-of-service vulnerability in Windows SMB Server caused by allocation of resources without limits or throttling . An authorized attacker (low privileges) can exploit this over the network to disrupt service, with high availability impact and no confidentiality or integrit...

EUVD-2026-73479

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...

CVE-2026-69403

CVE-2026-69403 is an information disclosure vulnerability in the Windows SMB Server component, caused by missing authorization that allows an authorized (low-privilege) local attacker to disclose information. The impact is limited to confidentiality with no integrity or availability impact. CNA-a...

CVE-2026-72949

CVE-2026-72949 is a null pointer dereference in the Windows SMB Server Network Transport Driver (srvnet.sys) that allows an unauthorized, network-based attacker to cause a denial of service . The Microsoft-assigned CVSS 3.1 score is 7.5 (HIGH) , reflecting low attack complexity, no required privi...

The vulnerabilities in the modules fs/smb/server/mgmt/user_session.c and fs/smb/server/smb2pdu.c of the SMB server support in Linux operating systems allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities in the modules fs/smb/server/mgmt/usersession.c and fs/smb/server/smb2pdu.c of the SMB support in Linux operating systems are related to the reutilization of previously freed memory. Exploiting these vulnerabilities can allow a remote attacker to compromise the confidentiality...