CVE-2024-47176

CVE-2024-47176 CUPSCommon UNIX Printing System는 인쇄 시스템으로, 주로 IPPInternet Printing Protocol 등의 프로토콜을 사용하여 인쇄 작업 및 큐를 관리합니다. 2024년 9월 27일, 인터넷에 Unix CUPS 원격 코드 실행 상세 정보가 공개되었으며, 익스플로잇 체인에는 여러 CVECVE-2024-47176/CVE-2024-47076/CVE-2024-47175/CVE-2024-47177 등가 포함됩니다. cups-browsed 프로세스가 기본 631 포트 UDP 패...

tkeypoc

PoC for CVE-2015-5477 BIND9 TKEY DoS 이 코드는 취약한 BIND9 DNS 서버를 충돌시키는 UDP 패킷을 전송합니다. elceef@osiris:/tkeypoc$ ./tkeypoc.py localhost CVE-2015-5477 BIND9 TKEY PoC Sending packet to localhost ... Done...

CVE-2024-47176-Scanner

CVE-2024-47176 Scanner Evilsocket의 CVE-2024-47176 PoC를 다듬어 스캐너로 만든 것입니다. 말 그대로 vim에서 열고 d 키를 누르고 있었습니다. 그의 연구는 여기에서 읽을 수 있습니다. 이 스크립트는 초기 UDP 패킷을 631 포트로 보내고 http 콜백을 트리거하여 취약한 호스트를 알려줍니다. 사용법: clone the repo git clone https://github.com/tonyarris/CVE-2024-47176-Scanner && cd...

CVE-2015-1578-PoC

CVE-2015-1578-PoC 개요 이것은 Windows에서 Achat 0.150 beta7 의 버퍼 오버플로우 취약점인 CVE-2015-1578 에 대한 개념 증명 익스플로잇입니다. 익스플로잇을 통해 조작된 UDP 패킷을 이용한 원격 코드 실행이 가능합니다. 목적 이 PoC는 깔끔하고 최소화된 잘 구조화된 익스플로잇 개발 예제로 사용되기 위해 만들어졌습니다. 다음을 보여줍니다: msfvenom을 통한 동적 셸코드 생성 인자 기반 타겟팅 및 설정 통합 리스너 설정 UDP를 통한 간단한 페이로드 전달 비디오 튜토리얼 종속성...

CVE-2015-1578-PoC-Metasploit

CVE-2015-1579 Metasploit 모듈 개요 이 모듈은 Windows의 Achat 0.150 beta7 에서 발생하는 버퍼 오버플로우 취약점 CVE-2015-1578 을 위한 Metasploit 모듈입니다. 조작된 UDP 패킷을 통해 원격 코드 실행이 가능합니다. 목적 이 모듈은 깔끔하고 최소화된 잘 구조화된 Metasploit 익스플로잇 개발 예제 역할을 하도록 설계되었습니다. 다음을 보여줍니다: msfvenom을 통한 동적 유니코드 인코딩 셸코드 생성 수동 페이로드 삽입 Metasploit 내부 페이로드 인코더 ...

Rocky Linux 10.1 [CIQ] Security Update: corosync-debuginfo / corosync-debugsource / corosync-vqsim / etc Multiple Vulnerabilities (crlsa-2026_13644)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613644 advisory. corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via intege...

Rocky Linux 9 [CIQ] Security Update: corosync / corosync-debuginfo / corosync-debugsource / etc Multiple Vulnerabilities (crlsa-2026_19200)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619200 advisory. corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer...

Rocky Linux 9 [CIQ] Security Update: corosync / corosync-debuginfo / corosync-debugsource / etc Multiple Vulnerabilities (crlsa-2026_13673)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613673 advisory. corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer...

AlmaLinux 9.2 [TuxCare] Security Update: dnsmasq / dnsmasq-utils (ALMALINUX9.2:CLSA-2025:1744628407)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1744628407 advisory. - An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DN...

Rocky Linux 10.2 [CIQ] Security Update: corosync-debuginfo / corosync-debugsource / corosync-vqsim / etc Multiple Vulnerabilities (crlsa-2026_19043)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619043 advisory. corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via intege...

Rocky Linux 8 [CIQ] Security Update: corosync / corosync-debuginfo / corosync-debugsource / etc Multiple Vulnerabilities (crlsa-2026_13657)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202613657 advisory. corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer...

CentOS Linux 7 [TuxCare] Security Update: dnsmasq / dnsmasq-utils (CENTOS7:CLSA-2024:1720179161)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1720179161 advisory. - An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Fl...

CVE-2022-31491

CVE-2022-31491 このリポジトリにはMetasploitモジュールとPoCファイルが含まれています。 詳細情報 Voltronic Viewpower/Pro およびリブランド/派生製品 UPS管理ソフトウェアは通常、適切に認証・認可されたユーザーがWebインターフェースを使用して、ソフトウェアが管理対象のUPSのシャットダウンを検出したときに、ユーザーが選択した単一のOSコマンドを実行するようにシステムを設定できるようにします。例えば、バッチジョブを停止したり、単一のコマンドで別のシステムにアラートを送信したりします。...

kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2023-001151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001151 advisory. An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. Tenable h...

CVE-2026-54632

SIPSorcery is a C#/.NET WebRTC, SIP, and VoIP library (NuGet). Prior to 10.0.9 , a single malformed UDP datagram sent to the RTP/ICE socket can remotely terminate an active media session (availability impact only). The root cause combines two issues: unchecked byte indexing in RTPChannel.OnRTPPac...

Astra Linux – Vulnerability in net-snmp

The handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP versions 5.8 through 5.9.3 has a NULL Pointer Exception bug. This bug can be exploited by a remote attacker who has write access to cause the instance to crash via a crafted UDP packet, resulting in a Denial of Service attack...

Astra Linux – Vulnerability in u-boot

A issue was discovered in Das U-Boot during the period from 2019.07. There is an unbounded memcpy operation when parsing a UDP packet, due to an underflow of the netprocessreceivedpacket integer value during the ncinputpacket call...

Astra Linux – Vulnerability in Corosync

A flaw was discovered in Corosync. A remote, unauthenticated attacker can exploit a vulnerability related to incorrect return values in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol UDP packet. This can lead to an out-of-bounds read,...