mothership_c2

Mothership C2 $\textcolorred\text免責事項!$ $\textcolorred\textこのツールは倫理的な使用のみを目的としています!$ 説明 Mothership C2は、Pythonで書かれたコマンド＆コントロールサーバーです。 機能 コマンドの送受信におけるエンドツーエンド暗号化をサポート すべての通信にHTTPを使用 現在Linuxをサポート（Windowsサポートはテスト中） DragonflyDB（Redisの高速な代替）を使用 フロントエンド...

CVE-2026-62357

Dragonfly's CMS.INITBYDIM and CMS.INITBYPROB commands in src/core/cms.cc accept dimensions whose width × depth × sizeof(int64_t) overflows, allocating an undersized counter buffer. An unauthenticated remote client can then use CMS.INCRBY/CMS.QUERY with unbounded dimensions to corrupt or disclose ...

CVE-2026-62357 DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...

CVE-2026-62357 DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...

CVE-2026-62357 DragonflyDB `CMS.INITBYDIM` integer overflow leads to a remote, attacker-controlled heap out-of-bounds write

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...

CVE-2026-54341

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack collection loaders, crashing the entire server process SIGSEGV. Because DragonflyDB requires no authentication by defaul...

EUVD-2026-39811

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack collection loaders, crashing the entire server process SIGSEGV. Because DragonflyDB requires no authentication by defaul...

CVE-2026-54341 Dragonfly: RESTORE operations may crash the server

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack collection loaders, crashing the entire server process SIGSEGV. Because DragonflyDB requires no authentication by defaul...

CVE-2026-54341

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack collection loaders, crashing the entire server process SIGSEGV. Because DragonflyDB requires no authentication by defaul...

CVE-2026-54341

Dragonfly (DragonflyDB) before version 1.39.0 is vulnerable: a crafted RESTORE payload triggers an out-of-bounds read in the listpack collection loaders, crashing the server (SIGSEGV). The issue is exploitable remotely without authentication via a single ~24-byte RESTORE command, enabling unauthe...

PT-2026-52864

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack collection loaders, crashing the entire server process SIGSEGV. Because DragonflyDB requires no authentication by defaul...

Dragonfly Access Control Vulnerability

Dragonfly is an open-source framework developed by DragonflyDB, capable of dynamically processing any content type. Versions of Dragonfly 2.4.1-rc.0 and earlier contained a access control vulnerability. This vulnerability stemmed from the absence of JWT authentication and RBAC authorization check...

EUVD-2025-28478

Malicious code in bioql PyPI...

EUVD-2025-14851

Malicious code in bioql PyPI...

EUVD-2025-12281

Malicious code in bioql PyPI...

Dragonfly 安全漏洞

Dragonfly is an open source framework from DragonflyDB that allows dynamic processing of any content type. A security vulnerability exists in Dragonfly versions prior to 2.1.0 that stems from the use of insecure hash functions such as MD5, which could lead to malicious file replacement...

CVE-2025-52935

Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly src/redis/lua/struct modules. This vulnerability is associated with program files luastruct.C. This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18...

CVE-2025-52935

Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly src/redis/lua/struct modules. This vulnerability is associated with program files luastruct.C. This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18...

CVE-2025-52935 Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly

Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly src/redis/lua/struct modules. This vulnerability is associated with program files luastruct.C. This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18...

CVE-2025-52935 Integer Overflow or Wraparound vulnerability in dragonflydb/dragonfly

Integer Overflow or Wraparound vulnerability in dragonflydb dragonfly src/redis/lua/struct modules. This vulnerability is associated with program files luastruct.C. This issue affects dragonfly: 1.30.1, 1.30.0, 1.28.18...