33 matches found
CVE-2025-10230
CVE-2025-10230: ثغرة RCE حرجة في Samba CVSS 10.0 ملخص الثغرة CVE-2025-10230 هي ثغرة حرجة لتنفيذ التعليمات البرمجية عن بُعد RCE ظلت مخفية في قاعدة كود Samba لمدة 13 عامًا. تتمثل الثغرة في معالجة حزم تسجيل WINS خدمة أسماء Windows للإنترنت. عند تكوينه كوحدة تحكم بالمجال مع wins support = yes وسكربت...
CVE-2025-10230
CVE-2025-10230 PoC pour CVE-2025-10230 - Injection de commande dans le hook WINS de Samba La configuration requise pour cette vulnérabilité n'affecte probablement personne. L'injection est limitée à 15 caractères et doit être un nom WINS valide, donc pas de ;...
CVE-2025-10230
CVE-2025-10230 — ثغرة حقن أوامر في خطاف WINS لـ Samba لا يتحمل المؤلف أي مسؤولية عن إساءة الاستخدام أو الأضرار الناجمة عن هذه الأداة. يتم توفير البحث لأغراض تعليمية ودفاعية فقط. الوصف يحتوي هذا المستودع على إثبات المفهوم PoC لـ CVE-2025-10230 ، وهي ثغرة حقن أوامر في آلية خطاف WINS في Samba. تؤثر...
NewStart CGSL MAIN 7.02 : samba Multiple Vulnerabilities (NS-SA-2026-0095)
The remote NewStart CGSL host, running version MAIN 7.02, has samba packages installed that are affected by multiple vulnerabilities: - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the print command...
CLSA-2026-1773667921 Fix CVE(s): CVE-2025-10230
SECURITY UPDATE: unauthenticated command injection via WINS hook in source4 NBT server. The "wins hook" parameter passed unsanitized NetBIOS names to a shell command, allowing arbitrary command execution by remote clients. - debian/patches/CVE-2025-10230.patch - CVE-2025-10230...
CLSA-2026-1773050498 Fix CVE(s): CVE-2025-10230
SECURITY UPDATE: remote command execution via unsanitized WINS hook NetBIOS name handling in Samba AD DC - debian/patches/CVE-2025-10230.patch: validate NetBIOS names in source4 WINS hook to prevent shell metacharacter injection - debian/patches/CVE-2025-10230-test.patch: add torture tests for WI...
AZL-69830 CVE-2025-10230 affecting package samba 4.18.3-2
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
ALPINE-CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
AZL-69782 CVE-2025-10230 affecting package samba 4.12.5-7
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
CVE-2025-10230 Samba: command injection in wins server hook script
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
CVE-2025-10230
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
EUVD-2025-38301
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
CVE-2025-10230
CVE-2025-10230 involves Samba’s front-end WINS hook where NetBIOS names from registration packets are inserted into a shell without proper validation or escaping, enabling unauthenticated remote code execution as the Samba process. The issue is rooted in unsanitized NetBIOS data in WINS registrat...
CVE-2025-10230: Improper Neutralization of Special Elements used in an OS Command
A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...
Samba WINS hook RCE (CVE-2025-10230)
In the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller's...
Astra Linux – Vulnerability in Samba
A flaw was discovered in Samba, particularly in the handling of the front-end WINS hook: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets is inserted into shell commands and executed b...
Linux Distros Unpatched Vulnerability : CVE-2025-10230
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or...
SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2025:3677-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3677-1 advisory. - CVE-2025-9640: Fixed vfsstreamsxattr uninitialized memory write bsc1251279. - CVE-2025-10230: Fixed command Injection in WINS...