CVE-2024-47176-Scanner

クイックスタート 使用例: python3 cupsscanner.py --targets 10.0.0.0/24 --callback 10.0.0.1:1337 CVE-2024-47176 脆弱性スキャナ cups-browsed CUPSとは何か、そしてなぜ重要なのか? CUPS Common Unix Printing System は、UNIXおよびUNIX系システム上でプリンタを管理・制御するためのオープンソースフレームワークです。 これは最も広く使用されているプリント用ライブラリの一つであり、UNIX、Linux、および一部のAppleデバイスでサポートされています。...

CVE-2023-40296

CVE-2023-40296 async-sockets-cpp 0.3.1 이하에는 udpsocket.hpp의 160-167행 부근에 있는 static void ReceiveFromUDPSocket udpSocket에서 off-by-one 버퍼 오버플로 취약점이 존재합니다. 이 버퍼 오버플로는 해당하는 모든 UDP 서버에 영향을 미칩니다. 원격 버퍼 오버플로는 UDP 소켓에 연결하여 큰 바이트 버퍼를 전송함으로써 트리거될 수 있습니다...

OpenSSL_DTLS_CVE_2014_0221

OpenSSLDTLSCVE20140221 OpenSSL DTLS CVE-2014-0221 リモートサービス拒否 DTLS（Datagram Transport Layer Security）とは？ データグラム転送層セキュリティ。物理層 TCP層データグラム対応 : TLS UDP層データグラム対応 : DTLS : HandShakeプロセスの適切な修正を通じて鍵交換、認証、セキュリティパラメータ設定などを処理し、タイムアウトおよび再送信を通じて非接続性の特性を持つUDPの安定したセキュア通信をサポート DTLSはDatagram Transport Layer...

CVE-2023-28810

CVE-2023-28810 CVE-2023-28810 익스플로잇 코드. udp-config-changer.py 대상 하이크비전 인터폰의 실행 중인 구성을 인증 없이 변경합니다. udp-password-brute.py 무차별 대입 추측을 통해 장치의 관리자 비밀번호를 복구하려고 시도합니다 단어 목록 미제공. SIP-ghost-caller.py 대상 인터폰이 인증되지 않은 SIP INVITE 메시지를 통해 울리게 하는 보너스 코드...

CVE-2023-28753

CVE-2023-28753 整数オーバーフローの脆弱性であり、ヒープメモリ破損につながる可能性があります。 ヒープ破損のデモ： ASAN を使用して ncrx サーバをビルドします。 root@kitploit: make ./ncrx 31337 敵対的クライアント root@kitploit: python exploit.py -g | nc -u 127.0.0.1 31337...

CVE-2026-33453

camel-coap ヘッダーインジェクション → RCE 脆弱性再現ツール CVE-2026-33453 このプロジェクトは、Apache Camel の camel-coap コンポーネントにおける Camel メッセージヘッダーインジェクション の脆弱性（CVE-2026-33453 として追跡）を実証します。認証されていない攻撃者が単一の CoAP UDP パケットを送信すると、Exchange に任意の Camel 制御ヘッダーを注入でき、ルートが camel-exec などのヘッダーに敏感なプロデューサーに転送する場合に リモートコード実行 を達成できます。 アドバイザリ:...

copyfail2_electric_boogaloo_fix

copyfail2electricboogaloofix copyfail 亜種（copyfail2electricboogaloo）に対する一時的な緩和措置 - 特権なし Linux LPE、xfrm ESP-in-UDP MSGSPLICEPAGES no-COW 高速パスを利用。ページキャッシュの書き込みを任意の読み取り可能ファイルに実行。/etc/passwd 内の nologin 行を sick::0:0:…:/:/bin/bash で上書きし、それに sus します。Copy Fail（CVE-2026-31431）と同じクラス、異なるサブシステム。 重要:...

kernel: udp: Fix wildcard bind conflict check when using hash2

A flaw was found in the Linux kernel's User Datagram Protocol UDP implementation. When a significant number of UDP sockets are bound to specific local addresses on the same port, the kernel's conflict detection mechanism can fail. This allows a local attacker to bind to a wildcard address on a po...

Exploit for CVE-2020-0609

RD Gateway BlueGate Validator CVE-2020-0609 / CVE-2020-06...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053420)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053420 advisory. In the Linux kernel, the following vulnerability has been resolved: inetdiag: fix kernel-infoleak for UDP sockets KMSAN reported a kernel-infoleak 1, that can...

CVE-2021-44320

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., video streaming and control by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding...

CVE-2026-80901

Linux kernel IPVS (IP Virtual Server) contains a flaw in checksum validation for ICMPv6 traffic. Specifically, ip_vs_in_icmp_v6() was missing checksum validation for ICMPv6 packets from clients, and handle_response_icmp() was missing the pseudo-header calculation when validating ICMPv6 messages f...

EUVD-2026-71496

In the Linux kernel, the following vulnerability has been resolved: tipc: avoid busy looping in tipcexitnet Blamed commit introduced a busy-wait loop in tipcexitnet to wait for pending UDP bearer cleanup works to complete: while atomicread&tn-wqcount condresched; This loop can busy-wait for a lon...

CVE-2026-80866

CVE-2026-80866 affects the Linux kernel TIPC subsystem (specifically tipc_exit_net()). A prior commit introduced a busy-wait loop that spins while waiting for pending UDP bearer cleanup work to complete. When cond_resched() is a NOP—common for high-priority tasks or kernels built with CONFIG_PREE...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ipv6: Proper accounting of fraggap on the paged allocation path In ip6.AppendData, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as follows: alloclen =...

EUVD-2026-70810

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local...

EUVD-2026-70809

MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source an...

EUVD-2026-70804

MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray that allows remote attackers to corrupt heap memory by sending UDP datagrams with negative declared lengths. Attackers can send crafted UDP packets to the configured UDPListen port to...

CVE-2021-44320

Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., video streaming and control by using tool to perform an IPv4 flood attack. Verified attacks includes SYN flooding and UDP flooding...

CVE-2021-44320

Parrot AR.Drone versions 1 and 2 lack a suitable mechanism to prevent denial-of-service attacks. An unauthenticated, remote attacker can exploit IPv4 flood attacks —specifically SYN flooding and UDP flooding —to disrupt device availability, including video streaming and control . The root cause i...