CVE-2020-0796

CVE-2020-0796 Exploit d'élévation de privilèges SMBv3 pour Windows Auteurs Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso Références https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796...

ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

CVE-2025-24071-POC

CVE-2025-24071 - Preuve de concept PoC Description Ce dépôt contient une preuve de concept PoC pour la CVE-2025-24071, une vulnérabilité de fuite de hachage NTLM dans l'Explorateur de fichiers Windows. Cette vulnérabilité permet à un attaquant de voler des hachages NTLM en exploitant la manière...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: server: The leak of activenumconn in ksmbdtcpnewconnection has been fixed. When ksmbdtcpnewconnection fails due to a kthreadrun failure, the transport is freed using freetransport. However, activenumconn is not decremented...

The vulnerability of the `fs/smb/server/smb2pdu.c` component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/smb/server/smb2pdu.c component in the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `fs/smb/server/smb2pdu.c` component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/smb/server/smb2pdu.c component in the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the `fs/smb/server/transport_tcp.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/smb/server/transporttcp.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `fs/smb/server/server.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/smb/server/server.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-68099

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An integer overflow vulnerability exists when processing Access Control Lists ACLs. This flaw can lead to a malformed ACL, which, when re-parsed by clients or ksmbd itself, may trigger out-of-bounds reads. Thi...

CVE-2026-62800

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...

CVE-2026-62790

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...

EUVD-2026-56669

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...

EUVD-2026-56666

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...

Windows SMBv3 Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...

PT-2026-70549

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...

PT-2026-70541

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...

CVE-2026-68083

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An authenticated client could exploit a path resolution error, specifically in the ksmbdvfskernpathcreate function. This vulnerability allows a client to use ".." components in a path to escape the intended...

AZL-95225 CVE-2026-68083 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbdvfskernpathcreate The SMB2 open lookup is rooted at the share with LOOKUPBENEATH, but the create/mkdir/hardlink sink is not: ksmbdvfskernpathcreate builds an absolute path with converttounixname...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb/server: The function ksmbdsessionrpcclose is called on the error path in the createsmb2pipe function. When the ksmbdiovpinrsp function fails, we should call ksmbdsessionrpcclose...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: smb/server: Fixed the refcount leak in parsedurablehandlecontext. When the command is a replay operation and -ENOEXEC is returned, the refcount of ksmbdfile must be released...