401 matches found
whosthere
Whosthere Local Area Network discovery tool with an interactive Terminal User Interface TUI written in Go. Discover, explore, and understand your LAN in an intuitive way. Whosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by...
evil-ssdp
Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...
CVE-2012-5960-PoC
CVE-2012-5960-PoC CVE-2012-5960, CVE-2012-5959 Proof of Concept 隨手記錄一下最近玩的東西。 !/usr/bin/python2 -- coding: utf-8 -- Usage: python2 libupnpDoSPoC.py import socket TARGET = 'TARGETIP' ''' normaltraffic = \ 'M-SEARCH HTTP/1.1\r\n' \ 'HOST:239.255.255.250:1900\r\n' \ 'MX:3\r\n' ...
cve-2020-9373-netgear-r6400
CVE-2020-9373 — Netgear R6400 upnpd Stack Overflow Research A complete three-phase study of the historical Netgear R6400 router vulnerability CVE-2020-9373 UPnP upnpd stack buffer overflow, SSDP on UDP port 1900, unauthenticated RCE/DoS. Three Phases 1. Phase 1 · Reproduction : firmware unpacking...
CVE-2026-85907
Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally...
CVE-2026-118145
Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-118145
A use-after-free vulnerability in the Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network . This flaw was addressed in the November 2026 security updates. Remediation is available through the official Microsoft security patches, includ...
EUVD-2026-122097
Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network...
EUVD-2026-121524
Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85907
A vulnerability exists in the Windows Simple Search and Discovery Protocol (SSDP) Service , where improper authentication allows an authorized attacker to achieve local privilege escalation . This issue is classified as CWE-522 (Insufficiently Protected Credentials) . While technical details rega...
Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
Improper authentication in Windows SSDP Service allows an authorized attacker to elevate privileges locally...
Windows Function Discovery SSDP Provider Remote Code Execution Vulnerability
Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network...
PT-2026-144139
Name of the Vulnerable Software and Affected Versions Windows SSDP Service affected versions not specified Description Improper authentication in the Windows SSDP Service allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the...
CVE-2026-91131
Summary Home Assistant is vulnerable to a blind Server-Side Request Forgery SSRF via the SSDP integration. An unauthenticated attacker on the local network can send a crafted SSDP "NOTIFY" announcement with an attacker-controlled "LOCATION" header, causing Home Assistant to issue an HTTP request ...
CVE-2026-78846
Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing...
PT-2026-121402
AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing...
EUVD-2026-108204
AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing...
CVE-2026-78846
Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing...
CVE-2026-78846
Multiple AiDot devices, specifically the AiDot Linkind Matter Smart Plug version 1.01.32 , are vulnerable to a heap-based buffer overflow . The flaw exists during the parsing of the SSDP location header . While the CVSS score indicates a CRITICAL severity (9.8) with high impact on confidentiality...
