ridrelay

RidRelay Quick and easy way to get domain usernames while on an internal network. Hit me up: @skorov8 How it works RidRelay combines the NTLM Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It takes these steps: 1. Spins up an SMB and HTTP servers and...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

CVE-2026-110714

The libsmb2 library, versions through 6.2 , is vulnerable to a heap out-of-bounds read caused by an integer underflow in the decode_acl function. A malicious SMB server or an attacker intercepting an unsigned session can trigger this by sending a crafted QUERY_INFO reply with an AclSize value bel...

CVE-2026-110712

libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2decodefileallinfo that allows malicious SMB servers to crash clients by sending an unchecked FileNameLength. Attackers controlling the server or performing man-in-the-middle on unsigned sessions can return crafted...

EUVD-2026-101135

libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2decodefileallinfo that allows malicious SMB servers to crash clients by sending an unchecked FileNameLength. Attackers controlling the server or performing man-in-the-middle on unsigned sessions can return crafted...

CVE-2026-96325

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network...

CVE-2026-88127

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

CVE-2026-70133

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network...

CVE-2026-96325

The Windows SMB Server is affected by a vulnerability caused by a missing reference to an active allocated resource (CWE-771). This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over the network. The vulnerability has a CVSS 3.1 base score of 7.5 and is categori...

CVE-2026-88127

A Use after free vulnerability in the Windows SMB Server allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-416 and carries a High base severity score of 7.0. Remediation is available via an official fix provided by Microsoft. No speci...

CVE-2026-70133

The Windows SMB Server is susceptible to a Denial of Service vulnerability caused by the allocation of resources without limits or throttling (CWE-770). An unauthorized attacker can exploit this flaw over the network to disrupt service availability. While specific exploit details or in-the-wild o...

CVE-2026-90152

A flaw was found in the smb/server component of the Linux kernel. A session leak in the ksmbdsessionregister function occurs when a session fails to be stored, leading to its reference count not being properly decremented. This can result in resource exhaustion, potentially allowing a remote...

Windows SMB Server Denial of Service Vulnerability

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network...

Windows SMB Server Elevation of Privilege Vulnerability

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

Windows SMB Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-70133: Windows SMB Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-88127: Windows SMB Server Elevation of Privilege Vulnerability

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96325: Windows SMB Server Denial of Service Vulnerability

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network...

CVE-2020-0796

CVE-2020-0796 Windows SMBv3 LPE Exploit Authors Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso References https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796 https://www.synacktiv.com/posts/exploit/im-smbghost-daba-dee-daba-da.html...

Linux same_client_has_lease() Function Use-After-Free

The vulnerability of the sameclienthaslease function in the fs/smb/server/oplock.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibili...