492 matches found
AppleDOS
AppleDOS CVE-2018-4407 Basado en CVE-2018-4407 https://lgtm.com/blog/applexnuicmperrorCVE-2018-4407, este tweet y este video. El error es una vulnerabilidad de desbordamiento de montón en el manejo de paquetes maliciosos cuando el sistema operativo intenta enviar un mensaje ICMP que contiene...
CVE-2022-29885
CVE-2022-29885 该工具仅用于安全研究。禁止使用该工具发起非法攻击，使用者应对后果负责 工具仅用于安全研究以及内部自查，禁止使用工具发起非法攻击，造成的后果使用者负责 介绍 Apache Tomcat DoS CVE-2022-29885 漏洞利用 EncryptInterceptor（Tomcat 集群）中的拒绝服务 目标机器需要启动 Cluster Nio Receiver，发送特制的 TCP 数据包会导致目标拒绝服务。无论是否使用 EncryptInterceptor，都存在拒绝服务漏洞的可能性 条件：启用 Tomcat 集群功能，并使用 NioReceiver 进行通...
CVE-2018-4407
CVE-2018-4407 CVE-2018-4407 是 XNU 内核 ICMP 错误代码中的一个缓冲区溢出漏洞。它会导致 IOS 设备在收到一个（是的，1 个！）恶意数据包时崩溃（包括笔记本和移动设备）。 该漏洞最初由 Kevin Backhouse 在其 lgtm 博客文章 中于 2018 年 10 月 30 日披露。 此仓库中的代码是 CVE-2018-4407 漏洞利用的概念验证，使用 Python 实现，并基于 scapy 和 nmap。 调试 我的调试过程中的一些步骤。查看 XNU 内核代码可以得出可能触发缓冲区溢出的 iphlen 和 tcphlen 的值。正如...
CVE-2022-29885
CVE-2022-29885 作者：1vere$k Apache Tomcat DoS（CVE-2022-29885）漏洞利用。 EncryptInterceptor（Tomcat 集群）中的拒绝服务漏洞。 目标机器需要启动 Cluster Nio Receiver。 发送一个特殊的 TCP 数据包将导致目标服务拒绝。 无论是否使用 EncryptInterceptor，在满足以下条件时都存在拒绝服务漏洞的可能性： Tomcat 集群功能已启用并使用 NioReceiver 进行通信。 任何版本的 Tomcat 都会受到影响。唯一的解决方案是使用可信网络。 安全的配置文件...
toxy
toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...
CVE-2020-1350-Fix
KB4569509：针对 DNS 服务器漏洞 CVE-2020-1350 的指南 简介 2020 年 7 月 14 日，Microsoft 发布了针对 CVE-2020-1350 | Windows DNS 服务器远程代码执行漏洞所述问题的安全更新。本公告描述了一个严重级别的远程代码执行 RCE 漏洞，该漏洞影响配置为运行 DNS 服务器角色的 Windows 服务器。我们强烈建议服务器管理员尽早应用此安全更新。 可以使用基于注册表的变通方案来帮助保护受影响的 Windows...
CVE-2020-1350
CVE-2020-1350 SigRED 通过减少DNS服务器上的TCP接收数据包大小最大限制并重启DNS服务来缓解漏洞影响的变通方法。...
CVE-2026-57023 Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash
An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial of Service DoS. When TCP proxy is engaged in a flow session,...
CVE-2026-60094
Vinchin Backup & Recovery through 9.0.0.86562 contains a heap buffer overflow vulnerability that allows unauthenticated remote attackers to cause process crash or memory corruption by sending a malformed TCP packet with an unchecked bodylen field to the agentlinkserver service. Attackers can craf...
CVE-2026-29008
U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcprxstatemachine function net/tcp.c that allows a network-adjacent attacker to crash the bootloader by sending a malformed TCP SYN+ACK packet with a manipulated data offset field causing payloadlen to become negative...
CVE-2026-40434
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...
CVE-2026-40434 Anviz CrossChex Standard Improper Verification of Source of a Communication Channel
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...
CVE-2026-40434
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...
Linux Distros Unpatched Vulnerability : CVE-2026-39863
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.1.1, 6.0.6, and 5.8.8, an out-of-bounds access in the core of Kamailio formerly...
CVE-2001-1549
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters...
CVE-2020-7800
The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has an Improper Check for Unusual or Exceptional Conditions CWE-754 vulnerability. The affected product is vulnerable to specially crafted TCP packets, which can cause the device to shut down or reboot a...
CVE-2024-41196
An issue in Ocuco Innovation - REPORTSERVER.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...
CVE-2024-41197
An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet...
