CVE-2024-47176

CVE-2024-47176 CUPS Common UNIX Printing System is a printing system that primarily uses protocols such as IPP Internet Printing Protocol to manage print jobs and queues. On September 27, 2024, details of a remote code execution in Unix CUPS were disclosed on the internet, with the exploitation...

tkeypoc

PoC for CVE-2015-5477 BIND9 TKEY DoS This code sends UDP packet that crashes vulnerable BIND9 DNS servers. elceef@osiris:/tkeypoc$ ./tkeypoc.py localhost CVE-2015-5477 BIND9 TKEY PoC Sending packet to localhost ... Done...

CVE-2022-31491

CVE-2022-31491 Metasploit module and PoC files in this repo. Further Information Voltronic Viewpower/Pro and rebrands/derivatives The UPS management software normally allows a properly Authenticated and Authorized user using a web interface to configure the system to run a single OS command of th...

CVE-2026-46560 OpenAM Authentication Bypass via RADIUS Spoofing

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the RADIUS authentication module opens an unconnected datagram socket and trusts the first UDP datagram received on the client source port. The receive path does not verify the source IP and port, match the response...

CVE-2024-47176-Scanner

CVE-2024-47176 Scanner Evilsocket's PoC for CVE-2024-47176, trimmed and turned into a scanner. I literally opened it in vim and held down the d key. Read his research here. This script just sends the initial UDP packet to port 631 and triggers an http callback, signalling a vulnerable host. Usage...

CVE-2015-1578-PoC-Metasploit

CVE-2015-1578 Metasploit Module Overview This is a Metasploit module for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This module is designed to serve as a clean, minimal, and...

CVE-2015-1578-PoC

CVE-2015-1578-PoC Overview This is a proof-of-concept exploit for CVE-2015-1578 , a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation leads to remote code execution via a crafted UDP packet. Purpose This PoC is intended to serve as a clean, minimal, and well-structured...

CVE-2026-53921

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer pdbuf when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two...

CVE-2026-53921 odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer pdbuf when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two...

CVE-2026-53921 odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer pdbuf when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two...

CVE-2026-53921 odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer pdbuf when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two...

CVE-2026-53921

A critical stack-based buffer overflow exists in the odhcpd daemon of OpenWrt , affecting versions prior to 24.10.8 and 25.12.5 . The vulnerability is triggered during the serialization of DHCPv6 Reply packets in the build_ia() and dhcpv6_ia_handle_IAs() functions. When processing a specially cra...

CVE-2026-53921

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer pdbuf when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two...

EUVD-2026-108966

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer pdbuf when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two...

OpenWRT odhcpd buffer error vulnerability

OpenWRT odhcpd versions prior to 25.12 contain a buffer error vulnerability. This vulnerability arises because the DHCPv6 IA response handler writes data beyond the end of a fixed 512-byte stack buffer named pdbuf when a single DHCPv6 REQUEST contains sufficient IA options. There are two distinct...

Astra Linux – Vulnerability in net-snmp

The handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP versions 5.8 through 5.9.3 has a NULL Pointer Exception bug. This bug can be exploited by a remote attacker who has write access to cause the instance to crash via a crafted UDP packet, resulting in a Denial of Service attack...

kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

CVE-2026-87665

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...

CVE-2026-87665

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...

CVE-2026-87665

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over I...