stop-bots

Stop Bots CDN 뒤에 숨지 않고도 서버를 설정하여 악성 봇을 차단할 수 있도록 도와주는 TUI, 웹 콘솔 및 CLI입니다. NGINX 및 기존 방화벽nftables 또는 iptables과 함께 작동합니다: NGINX 설정. - 알려진 봇을 카테고리스캐너, 검색 엔진, AI 크롤러별로 분류하고, 사이트 설정에 규칙을 주입하여 차단하거나 허용합니다. NGINX 로그를 스캔하여 봇을 동적으로 탐지하고, 아직 어떤 규칙 세트에도 추적되지 않는 봇이라도 차단합니다. 방화벽 스크립트. - 전체 국가, 데이터센터 IP 범위,...

fail2ban

/ | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: 複数の認証エラーを引き起こすホストをBANする Fail2Banは、/var/log/auth.log...

iptables-essentials

Iptables Essentials: 일반적인 방화벽 규칙 및 명령어 ☑️ TODO 유용한 Iptables 구성 예제 추가 유용한 커널 설정 sysctl 구성 추가 유용한 외부 리소스 링크 추가 고급 구성 예제, 명령어, 규칙 추가 목차 Iptables 구성을 도와주는 도구 매뉴얼/하우투/튜토리얼 유용한 커널 설정 sysctl 구성 rpfilter logmartians sendredirects acceptsourceroute acceptredirects tcpsyncookies icmpechoignorebroadcasts...

gibson

Gibson Network monitoring tool that maps process-to-network connections, identifies cloud providers, and generates firewall rules. Lightweight agent for collection, server for aggregation, parser for analysis. Screenshots Cross-machine overview — OS version comparison, shared IP detection,...

firewall-cve

firewall-cve Windows AppContainer 방화벽 규칙 보안 기능 우회 취약점 CVE-2021-41338 보안 취약점 공개일: 2021년 10월 12일 CNA 지정: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 공격 벡터 로컬 공격 복잡도 낮음 필요 권한 낮음 사용자 상호작용 없음 범위 변경 없음 기밀성 높음 무결성 없음 가용성 없음 악용 코드 성숙도 개념 증명 수정 수준 공식 수정 신뢰도 확인됨 이러한 지표의 정의에 대한 자세한 내용은 Common...

Firewall-Rules

이 저장소에는 README가 없습니다...

Reachability-Check

Reachability Check 🌐 EN | TR Browser-based reachability checker — test network connectivity, firewall rules and access restrictions. Single HTML file. Zero dependencies. No web server required to run. Features Dual measurement: HTTP Fetch + Image Ping via each service's own favicon Service packs:...

CVE-2026-82932

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in...

CVE-2026-56127

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

EUVD-2026-70496

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

CVE-2026-56127 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

PT-2026-85052

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall rules edit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escapin...

PT-2026-85053

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall schedule edit.php. The schedule description is stored without HTML sanitization and subsequently inserted into a...

CVE-2026-51720

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83898

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51720

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)

Last week, there were 274 vulnerabilities disclosed in 213 WordPress Plugins and 17 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 116 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)

Last week, there were 294 vulnerabilities disclosed in 233 WordPress Plugins and 14 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 149 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

CVE-2026-56846

A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system. Mitigation ...

CVE-2026-20028

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...