whosthere

Whosthere Herramienta de descubrimiento de redes de área local con una interfaz de usuario de terminal interactiva TUI escrita en Go. Descubre, explora y comprende tu LAN de forma intuitiva. Whosthere realiza escaneos concurrentes sin privilegios utilizando escáneres mDNS y SSDP. Además, recorre ...

evil-ssdp

Resumen Esta herramienta responde a solicitudes de descubrimiento multicast SSDP, haciéndose pasar por un dispositivo UPNP genérico. Tu dispositivo suplantado aparecerá mágicamente en el Explorador de Windows en las máquinas de tu red local. Los usuarios que sean tentados a abrir el dispositivo...

CVE-2012-5960-PoC

CVE-2012-5960-PoC CVE-2012-5960, CVE-2012-5959 Prueba de Concepto Un registro rápido de algo que he estado probando recientemente. root@kitploit: !/usr/bin/python2 -- coding: utf-8 -- Usage: python2 libupnpDoSPoC.py import socket TARGET = 'TARGETIP' ''' normaltraffic = \ 'M-SEARCH HTTP/1.1\r\n' ...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

cve-2020-9373-netgear-r6400

CVE-2020-9373 — Netgear R6400 upnpd Stack Overflow Research A complete three-phase study of the historical Netgear R6400 router vulnerability CVE-2020-9373 UPnP upnpd stack buffer overflow, SSDP on UDP port 1900, unauthenticated RCE/DoS. Three Phases 1. Phase 1 · Reproduction : firmware unpacking...

Exploit for CVE-2020-9373

CVE-2020-9373 – Netgear R6400 UPnP upnpd stack overflow vuln...

EUVD-2021-34854

An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP which is off...

May 12, 2026—KB5089548 (OS Build 28000.2113)

None None...

May 12, 2026—Hotpatch KB5089466 (OS Builds 26200.8390 and 26100.8390)

None None...

CVE-2026-32082

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-22514

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2026-32082

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2026-32068

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privileges locally...

CVE-2026-32068 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability

...

Microsoft Windows SSDP 竞争条件问题漏洞

Microsoft Windows SSDP is a simple service discovery provider developed by Microsoft Corporation. The Microsoft Windows SSDP Service has a vulnerability related to race conditions. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are...

Microsoft Windows SSDP 竞争条件问题漏洞

Microsoft Windows SSDP is a simple service discovery provider developed by Microsoft Corporation. The Microsoft Windows SSDP Service has a vulnerability related to race conditions. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are...

PT-2026-32809

Name of the Vulnerable Software and Affected Versions Windows SSDP Service affected versions not specified Description A race condition occurs in the Windows SSDP Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally...

CVE-2026-4499

A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgimain of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-4499 D-Link DIR-820LW SSDP ssdpcgi_main os command injection

A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgimain of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-4499 D-Link DIR-820LW SSDP ssdpcgi_main os command injection

A vulnerability was determined in D-Link DIR-820LW 2.03. Affected is the function ssdpcgimain of the component SSDP. Executing a manipulation can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...