CVE-2012-5960-PoC

CVE-2012-5960-PoC CVE-2012-5960, CVE-2012-5959 Prueba de Concepto Un registro rápido de algo que he estado probando recientemente. !/usr/bin/python2 -- coding: utf-8 -- Usage: python2 libupnpDoSPoC.py import socket TARGET = 'TARGETIP' ''' normaltraffic = \ 'M-SEARCH HTTP/1.1\r\n' ...

whosthere

Whosthere Local Area Network discovery tool with an interactive Terminal User Interface TUI written in Go. Discover, explore, and understand your LAN in an intuitive way. Whosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by...

cve-2020-9373-netgear-r6400

CVE-2020-9373 — Desbordamiento de búfer en la pila de upnpd en Netgear R6400 Investigación completa en tres fases de la vulnerabilidad histórica CVE-2020-9373 desbordamiento de búfer en la pila de upnpd de UPnP, SSDP en el puerto UDP 1900, RCE/DoS sin autenticación. Tres fases 1. Fase 1 ·...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

evil-ssdp

概述 该工具响应SSDP多播发现请求，伪装成通用UPNP设备。您伪造的设备将神奇地出现在本地网络机器的Windows资源管理器中。被引诱打开设备的用户将看到一个可配置的钓鱼页面。该页面可以通过SMB加载隐藏图像，使您能够捕获或中继NetNTLM挑战/响应。 还提供了模板，用于通过基本身份验证和登录表单捕获明文凭据，且创建自定义模板快速简单。 它不需要现有凭据即可执行，甚至可以在通过禁用NETBIOS和LLMNR来防御Responder攻击的网络上工作。任何使用SSDP/UPNP的操作系统或应用程序都可能成为目标，但当前大部分武器化主要针对Windows 10。 视频：钓鱼概述...

The vulnerability of the ssdpcgi_main() function in the SSDP component of the D-Link DIR-820LW router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the ssdpcgimain function in the SSDP component of the D-Link DIR-820LW router’s software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

Exploit for CVE-2020-9373

CVE-2020-9373 – Netgear R6400 UPnP upnpd stack overflow vuln...

(Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability

This vulnerability allows network-adjacent attackers to initiate arbitrary server-side requests on affected installations of Home Assistant Green. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SSDP headers. The issue results from the...

EUVD-2021-34854

An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP which is off...

May 12, 2026—KB5089548 (OS Build 28000.2113)

None None...

May 12, 2026—Hotpatch KB5089466 (OS Builds 26200.8390 and 26100.8390)

None None...

CVE-2026-32082

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-22514

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2026-32082

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2026-32068

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2026-32068 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

Microsoft Windows SSDP 竞争条件问题漏洞

Microsoft Windows SSDP is a simple service discovery provider developed by Microsoft Corporation. The Microsoft Windows SSDP Service has a vulnerability related to race conditions. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are...

Microsoft Windows SSDP 竞争条件问题漏洞

Microsoft Windows SSDP is a simple service discovery provider developed by Microsoft Corporation. The Microsoft Windows SSDP Service has a vulnerability related to race conditions. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are...

CVE-2026-32068: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2026-32083: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...