CVE-2013-5211

CVE-2013-5211 PoC 네트워크 시간 프로토콜 데몬 ntpd monlist 명령 활성화 DoS 이 Python 스크립트는 CVE-2013-5211 취약점을 탐지하는 데 사용됩니다. 이 취약점은 NTP네트워크 시간 프로토콜 서버에서 발견되었습니다. ntpd monlist 명령을 사용하여, 이 취약점은 공격자가 서버에 일련의 UDP 패킷을 전송하여 서버의 리소스를 소모할 수 있게 합니다. 스크립트는 사용자가 지정한 NTP 서버에 UDP 패킷을 전송하고 서버의 응답을 기다립니다. 서버가 응답하면 스크립트는 해당 서버에...

CUPS-CVE-2024-47176

CVE-2024-47176 CUPS용 취약점 스캐너 CUPS Common Unix Printing System을 실행하는 시스템에서 CVE-2024-47176 취약점을 스캔하는 간단한 도구입니다. 이 취약점은 포트 631에서 인터넷 인쇄 프로토콜 IPP을 통해 원격 코드 실행RCE로 이어질 수 있습니다. 기능 자동 스캔 : 취약한 CUPS 인스턴스를 탐지하기 위해 조작된 UDP 패킷을 전송합니다. 멀티 스레드 스캔 : 여러 IP 주소를 동시에 효율적으로 스캔합니다. 콜백 로깅 : 콜백 서버를 통해 취약한 시스템의 응답을...

Memcrashed-DDoS-Exploit

MEMCRASHED DDOS 공격 도구 저자: @037 이 도구는 Shodan.io에서 얻은 Memcached 서버로 위조된 UDP 패킷을 전송할 수 있게 해줍니다. 사전 요구 사항 설치되어 있어야 할 것은 Python 3.x 뿐입니다. apt-get install python3 Scapy와 Shodan 모듈도 설치되어 있어야 합니다. pip install scapy pip install shodan Shodan API 사용하기 이 도구는 업그레이드된 Shodan API 키가 필요합니다. .edu 이메일로 가입하면 Shodan...

Astra Linux – Vulnerability in Corosync

A flaw was discovered in Corosync. There is an integer overflow vulnerability in Corosync’s join message sanity validation mechanism, which allows a remote, unauthenticated attacker to send crafted User Datagram Protocol UDP packets. This can cause the service to crash, resulting in a denial of...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and caus...

CVE-2026-68062

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68960: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has th...

CVE-2026-68959: Path Traversal: '/../filedir'

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-68062: Improper Limitation of a Pathname to a Restricted Directory

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...

CVE-2026-53151

CVE-2026-53151 concerns the Linux kernel AF_RXRPC subsystem, where legacy parsing of the SACK table could trigger an invalid buffer access when processing fragmented UDP packets. The fix updates rxrpc_input_soft_acks() and rxrpc_input_ack() logic so that SACK contents are not copied into a flat b...

AZL-89519 CVE-2026-3238 affecting package samba 4.18.3-2

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...

CVE-2026-3238 Samba: denial of service against ad dc wins server

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...

CVE-2026-3238: NULL Pointer Dereference

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...

Red Hat Enterprise Linux 10 异常处理不当漏洞

Samba is an open-source suite of standard Windows interoperability programs for Linux and Unix systems. Samba has a code vulnerability that stems from the WINS protocol handler, which fails to properly validate incoming packets when operating as an Active Directory domain controller. This allows...

RLSA-2026:19043 Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Security Fixes: corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer overflow in join message...

corosync security update

An update is available for corosync. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The corosync packages provide the Corosync Cluster Engine and C APIs for...

RockyLinux 9 : corosync (RLSA-2026:19200)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19200 advisory. corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer...

CVE-2026-46133

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

RLSA-2026:19200 Moderate: corosync security update

The corosync packages provide the Corosync Cluster Engine and C APIs for Rocky Linux cluster software. Security Fixes: corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35091 corosync: Corosync: Denial of Service via integer overflow in join message...

CVE-2026-45859 netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: do shared-unconfirmed check before segmentation Ulrich reports a regression with nfqueue: If an application did not set the 'FGSO' capability flag and a gso packet with an unconfirmed nfconn entry is...