151 matches found
SMBetray
SMBetray Версия 1.0.0. Этот инструмент является PoC для демонстрации способности злоумышленника перехватывать и модифицировать небезопасные SMB-соединения, а также компрометировать некоторые защищённые SMB-соединения, если известны учётные данные. Предыстория Представлено на Defcon26 в докладе...
SMBetray
SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...
CVE-2025-55234
CVE-2025-55234 이 취약점은 공격자가 SMBServer Message Block 프로토콜에 대한 릴레이 공격을 수행할 수 있게 합니다. 성공할 경우 권한 상승EoP으로 이어져, 본질적으로 인증되지 않은 사용자가 시스템에서 더 높은 수준의 액세스 권한을 얻을 수 있게 됩니다. 작성자: Mark Mallia 이슈 이 취약점은 공격자가 SMBServer Message Block 프로토콜에 대한 릴레이 공격을 수행할 수 있게 합니다. 성공할 경우 권한 상승으로 이어져, 본질적으로 인증되지 않은 사용자가 시스템에서 더 높은...
ridrelay
RidRelay Быстрый и простой способ получить имена пользователей домена, находясь во внутренней сети. Свяжитесь со мной: @skorov8 Как это работает RidRelay объединяет NTLM Relay атаку, обычные запросы на основе lsarpc и циклический перебор RID для получения списка имен пользователей домена. Он...
Window-7--Vulnerability-and-Exploitation.
Windows 7 Vulnerability Assessment & Exploitation Lab 🎯 Ob...
pentesting-lab-ntlm-relay
NTLM Relay & SMB Exploitation Lab 🎯 !Pentestinghttps://img...
CVE-2026-43377
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Don't log keys in SMB3 signing and encryption key generation When KSMBDDEBUGAUTH logging is enabled, generatesmb3signingkey and generatesmb3encryptionkey log the session, signing, encryption, and decryption key bytes. Remo...
CVE-2026-43377 ksmbd: Don't log keys in SMB3 signing and encryption key generation
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Don't log keys in SMB3 signing and encryption key generation When KSMBDDEBUGAUTH logging is enabled, generatesmb3signingkey and generatesmb3encryptionkey log the session, signing, encryption, and decryption key bytes. Remo...
Azure Linux 3.0 Security Update: samba (CVE-2017-12150)
The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-12150 advisory. - It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce SMB signin...
MiracleLinux 4 : samba-3.6.23-45.AXS4 (AXSA:2017-2303:05)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2303:05 advisory. A race condition was found in samba server. A malicious samba client could use this flaw to access files and directories in areas of the server file...
EUVD-2016-5006
Malware in sbrugna...
EUVD-2016-0918
Malware in sbrugna...
About Elevation of Privilege – Windows SMB Client (CVE-2025-33073) vulnerability
About Elevation of Privilege - Windows SMB Client CVE-2025-33073 vulnerability. A vulnerability from the June Microsoft Patch Tuesday allows an attacker to execute a malicious script, forcing the victim's host to connect to the attacker's SMB server and authenticate, resulting in gaining SYSTEM...
CLSA-2025-1747688581 kernel: Fix of 15 CVEs
media: uvcvideo: Fix double free in error path CVE-2024-57980 - vrf: use RCU protection in l3mdevl3out CVE-2025-21791 - geneve: Fix use-after-free in genevefinddev. CVE-2025-21858 - ibmvnic: Don't reference skb after sending to VIOS CVE-2025-21855 - pfifotailenqueue: Drop new packet when...
OESA-2025-1446 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ntbhwswitchtec: Fix shift-out-of-bounds in switchtecntbmwsettrans There is a kernel API ntbmwcleartrans would pass 0 to both addr and size. This would make...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2reconnectserver CVE-2024-35870 In the Linux kernel, the following vulnerability has been resolved: ext4: fix timer use-after-free on failed mount CVE-2024-49960 In the Linux kernel, the...
PT-2025-24857
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description Improper access control in the Windows SMB client, specifically within the mrxsmb.sys driver, allows an authorized or unauthenticated remote attacker to elevate privileges to the NT...
UBUNTU-CVE-2024-53179
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key Customers have reported use-after-free in @ses-authkey.response with SMB2.1 + sign mounts which occurs due to following race: task A task B cifsmount dfsmountshare getsession...
RHEL 5 : samba (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - samba: symlink race permits opening files outside share directory CVE-2017-2619 - samba: Netlogon elevati...