tkeypoc

针对 CVE-2015-5477 BIND9 TKEY DoS 的 PoC 此代码发送UDP数据包，使存在漏洞的BIND9 DNS服务器崩溃。 root@kitploit: elceef@osiris:/tkeypoc$ ./tkeypoc.py localhost CVE-2015-5477 BIND9 TKEY PoC Sending packet to localhost ... Done...

kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

CVE-2024-47176-Scanner

CVE-2024-47176 扫描器 Evilsocket 针对 CVE-2024-47176 的 PoC，经过精简后改成了一个扫描器。我真的只是在 vim 中打开它，然后一直按住 d 键。 阅读他的研究：这里。这个脚本只是向 631 端口发送初始 UDP 数据包，并触发一个 HTTP 回调，表示目标主机存在漏洞。 用法： root@kitploit: clone the repo git clone https://github.com/tonyarris/CVE-2024-47176-Scanner && cd CVE-2024-47176-Scanner/ set up a...

kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

CVE-2015-1578-PoC

CVE-2015-1578-PoC 概述 这是一个针对 CVE-2015-1578 的概念验证利用程序，该漏洞是 Windows 上 Achat 0.150 beta7 中的一个缓冲区溢出漏洞。利用该漏洞可通过精心构造的 UDP 数据包导致远程代码执行。 目的 此 PoC 旨在作为干净、简洁、结构良好的漏洞利用开发示例。它展示了： 通过 msfvenom 动态生成 Shellcode 基于参数的定位和配置 集成监听器设置 通过 UDP 进行简单的有效载荷传递 视频教程 依赖项 Python 3 msfvenom（Metasploit 框架的一部分） rlwrap（用于增强 Netcat...

CVE-2015-1578-PoC-Metasploit

CVE-2015-1578 Metasploit 模块 概述 这是针对 CVE-2015-1578 的一个 Metasploit 模块，该漏洞是 Windows 上 Achat 0.150 beta7 中的一个缓冲区溢出漏洞。利用该漏洞可通过特制的 UDP 数据包实现远程代码执行。 目的 本模块旨在作为 Metasploit 漏洞利用开发的一个简洁、最小且结构良好的示例。它演示了： 通过 msfvenom 动态生成 Unicode 编码的 shellcode 手动注入 payload（绕过 Metasploit 内部的 payload 编码器） 基于 UDP 的简单投递机制...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2023-001151)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001151 advisory. An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020. Tenable h...

CVE-2022-31491

CVE-2022-31491 此仓库包含 Metasploit 模块和 PoC 文件。 更多信息 Voltronic Viewpower/Pro 及其更名/衍生版本 这款 UPS 管理软件通常允许通过 Web 界面经过正确身份验证和授权的用户，在软件检测到受管 UPS 正在关机时，将系统配置为运行一条由用户选择的操作系统命令。例如，通过单条命令停止批处理作业或向另一个系统发送警报。 由于一个相关的关键底层功能通过网络暴露（CWE-749：暴露不安全的活跃功能），且无需任何身份验证或授权，攻击者即可发送特制的 UDP 数据包，立即运行任意代码，而无论是否存在受管 UPS 或其状态如何。...

CVE-2024-47176

CVE-2024-47176 CUPS（Common UNIX Printing System，通用Unix打印系统）是一个打印系统，它主要是使用 IPP（Internet Printing Protocol）等协议来管理打印工作及队列。 2024年9月27日，互联网上披露 Unix CUPS...

CVE-2026-54632

SIPSorcery is a C#/.NET WebRTC, SIP, and VoIP library (NuGet). Prior to 10.0.9 , a single malformed UDP datagram sent to the RTP/ICE socket can remotely terminate an active media session (availability impact only). The root cause combines two issues: unchecked byte indexing in RTPChannel.OnRTPPac...

Astra Linux – Vulnerability in u-boot

A issue was discovered in Das U-Boot during the period from 2019.07. There is an unbounded memcpy operation when parsing a UDP packet, due to an underflow of the netprocessreceivedpacket integer value during the ncinputpacket call...

Astra Linux – Vulnerability in net-snmp

The handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP versions 5.8 through 5.9.3 has a NULL Pointer Exception bug. This bug can be exploited by a remote attacker who has write access to cause the instance to crash via a crafted UDP packet, resulting in a Denial of Service attack...

EUVD-2026-75886

An OS command injection vulnerability in the TDDP module of Deco BE11000 allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete device compromise, including unauthorized command execution...

CVE-2026-17176

An OS command injection vulnerability in the TDDP module of Deco BE11000 allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete device compromise, including unauthorized command execution...

CVE-2026-17176 OS command injection Vulnerability in Deco BE11000

An OS command injection vulnerability in the TDDP module of Deco BE11000 allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete device compromise, including unauthorized command execution...

CVE-2026-17176

TP-Link Deco BE11000 is affected by an OS command injection vulnerability in its TDDP module . An attacker on the adjacent network can exploit this by sending a crafted UDP packet , executing arbitrary commands with root privileges without any prior authentication. Successful exploitation may lea...

CVE-2026-17176 OS command injection Vulnerability in Deco BE11000

An OS command injection vulnerability in the TDDP module of Deco BE11000 allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete device compromise, including unauthorized command execution...

PT-2026-89653

An OS command injection vulnerability in the TDDP module of Deco BE11000 allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete device compromise, including unauthorized command execution...

CVE-2026-85431 MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source an...

CVE-2026-85431

MOOS essential-moos (through version 10.0.1 ) is vulnerable to an unauthenticated UDP packet injection in pMOOSBridge when configured with UDPListen. An attacker can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community, with spoofed source an...