SambaHunter

SambaHunter 这是一个利用 Samba RCE（CVE-2017-7494）的简单脚本。 现在支持 Python3。许多必需的 Python2 库已弃用（例如 commands） 添加了日志记录，以显示哪些共享是可写的。如果出现 'Exploit Finished' 但没有可写共享，则表示利用未生效。 要求 sudo apt-get install smbclient pip install pysmbclient 用法 python3 sambahunter.py -h / | | | | | | | | | \ \ / | ' | ' \ / | || | | | | '...

CVE-2017-7494

CVE-2017-7494 你好，我是来自利比亚的Gihad 17 C 漏洞利用信息 ========================================================================================== 该模块触发Samba版本3.5.0至4.4.14、4.5.10和4.6.4中的一个任意共享库加载漏洞。 该模块需要有效的凭据、可访问共享中的可写文件夹，以及可写文件夹的服务器端路径知识。 在某些情况下，结合匿名访问和常见的文件系统位置，可以自动利用此漏洞。...

AZL-104238 CVE-2026-97964 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: pppsynctty: ensure a writeable skb header pppsynctxmunge checks headroom before prepending the address and control bytes, but does not ensure that the skb header is writable. A received skb can reach this function through PPP...

CVE-2026-97964

In the Linux kernel, the following vulnerability has been resolved: pppsynctty: ensure a writeable skb header pppsynctxmunge checks headroom before prepending the address and control bytes, but does not ensure that the skb header is writable. A received skb can reach this function through PPP...

CVE-2026-97964

In the Linux kernel, the following vulnerability has been resolved: pppsynctty: ensure a writeable skb header pppsynctxmunge checks headroom before prepending the address and control bytes, but does not ensure that the skb header is writable. A received skb can reach this function through PPP...

CVE-2026-14875

CVE-2026-14875 affects IBM i Access Client Solutions (ACS) on Windows, with versions 1.1.2.0 through 1.1.9.13 vulnerable when installed for all users due to a publicly writable directory. The underlying issue enables arbitrary code execution with local access and requires user interaction. IBM’s ...

CVE-2026-14875 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...

EUVD-2026-58363

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...

CVE-2026-14875

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...

CVE-2026-14875 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...

CVE-2026-14875: Untrusted Search Path

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory...

PT-2026-71804

Name of the Vulnerable Software and Affected Versions IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 Description Arbitrary code execution is possible on Windows systems when the software is installed for all users. This issue occurs because of a publicly writeable directory, whic...

CVE-2026-13094

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...

CVE-2026-13094 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...

CVE-2026-13094

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...

EUVD-2026-57614

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...

CVE-2026-14866: Use of Hard-coded Credentials

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore...

PT-2026-71301

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore...

PT-2026-71321

Name of the Vulnerable Software and Affected Versions IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 Description Arbitrary code execution is possible on Windows systems when the software is installed for all users. This issue occurs because a configuration file is publicly...

CVE-2026-13094: Improper Control of Generation of Code

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...