6619 matches found
CVE-2026-89147
Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smuxaccept performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the...
EUVD-2026-76036
Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smuxaccept performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listener and send no data, causing the...
Linux Distros Unpatched Vulnerability : CVE-2026-89147
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smuxaccept performs an unauthenticated blocking read without timeou...
Cisco-SNMP-Slap
OVERVIEW cisco-snmp-slap utilises IP address spoofing in order to bypass an ACL protecting an SNMP service on a Cisco IOS device. Typically IP spoofing has limited use during real attacks outside DoS. Any TCP service cannot complete the inital handshake. UDP packets are easier to spoof but the...
cisco-SNMP-enumeration
Cisc0wn - Script SNMP de Cisco Script de enumeración SNMP de Cisco, fuerza bruta, descarga de configuración y descifrado de contraseñas. Probado y diseñado para funcionar con switches y routers Cisco IOS. Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por...
Zimbra-CVE-2026-73570-Rules
Wazuh Rules CVE-2026-73570 Zimbra OS Command Injection Detection rules for CVE-2026-73570 , an OS command injection in Zimbra Collaboration Suite via the SNMP trap notification parameter snmpnotify. Vulnerability...
CVE-2026-73570
CVE-2026-73570 — Zimbra zimbra-snmp Unauthenticated OS Command Injection PoC Proof-of-concept exploit for CVE-2026-73570 , an unauthenticated OS command injection CWE-78, CVSS 8.9 in Zimbra Collaboration Suite Disclaimer: This PoC is intended only for authorized security testing , defensive...
Cisco-IOS-Exploitation-JAGUAR_TOOTH-CVE-2017-6742-Reconstruction
= doi.org/10.5281/zenodo.18283540 = orcid.org/0009-0007-7728-256X README.md root@kitploit: 🐆 Análisis e Investigación de JAGUARTOOTH APT28/Fancy Bear -blue?style=for-the-badge 📑 Resumen Análisis exhaustivo y reconstrucción técnica del malware JAGUARTOOTH, un instrumento de espionaje cibernético n...
SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices
SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices CVE-2023-20352 es una falla crítica de desbordamiento de pila en el motor SNMP de Cisco IOS/IOS XE. Con solo paquetes SNMP manipulados, los atacantes remotos pueden bloquear sistemas u obtener control root. Todas las versiones de SNMP s...
CVE-2026-73570
CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview...
CVE-2026-73570
CVE-2026-73570 PoC - SMTP 命令注入测试工具 一个自定义的底层 Python 概念验证(PoC)脚本,用于测试 SMTP 命令注入漏洞(CVE-2026-73570)。 该工具发送包含 shell 风格命令替换(例如 $command)的畸形 RCPT TO 地址,以确定目标邮件服务器或其下游处理管道是否在未经清理的情况下错误地将该地址传递给 shell。 ⚠️ 免责声明: 此工具仅用于教育目的和授权安全测试。请确保您拥有测试目标基础设施的明确权限。未经授权扫描或利用邮件服务器属于违法行为。 漏洞信息(针对 Zimbra) 并非每个 Zimbra...
...[ More ]
This Metasploit module chains three issues in SonicWall SMA1000 appliances. An unauthenticated, absolute-form OPTIONS request makes the WorkPlace listener act as an unintended forward proxy CVE-2026-83548. The module uses this access and a vendor-installed CouchDB update handler to obtain read an...
DEBIAN-CVE-2026-87875
The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...
AZL-100920 CVE-2026-87875 affecting package cups 2.4.19-1
The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...
CVE-2026-87875
The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...
CVE-2026-87875 Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound
The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...
CVE-2026-87875 Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound
The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...
CVE-2026-87875
OpenPrinting CUPS is affected by a heap out-of-bounds read in the cupsUTF32ToUTF8() function (cups/transcode.c). The function lacks a source-length bound, allowing it to read past the end of the source buffer. The flaw is reachable via SNMP supply-description parsing in backend/snmp-supplies.c wi...
EUVD-2026-75085
The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...
CVE-2026-87875 Cups: openprinting cups: heap out-of-bounds read in cupsutf32toutf8() via missing source-length bound
The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...