553 matches found
iptables-essentials
Iptables Essentials: 일반적인 방화벽 규칙 및 명령어 ☑️ TODO 유용한 Iptables 구성 예제 추가 유용한 커널 설정 sysctl 구성 추가 유용한 외부 리소스 링크 추가 고급 구성 예제, 명령어, 규칙 추가 목차 Iptables 구성을 도와주는 도구 매뉴얼/하우투/튜토리얼 유용한 커널 설정 sysctl 구성 rpfilter logmartians sendredirects acceptsourceroute acceptredirects tcpsyncookies icmpechoignorebroadcasts...
fail2ban
root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban：禁止导致多次认证错误的主机 Fail2Ban 扫描 /var/log/auth.log 等日志文件，并禁止尝试过多失败登录的 IP 地址。它通过更新系统防火墙规则，在可配置的时间内拒绝来自这些 IP 地址的新连接。Fail2Ban 开箱即用，可读取许多标准日志文件（例如 sshd 和 Apache 的日志），并且可以轻松配置，使其能够根据需要读取任何日志文件中的任何错误。 虽然 Fail2Ban...
firewall-cve
firewall-cve Windows AppContainer ファイアウォール規則のセキュリティ機能バイパスの脆弱性 CVE-2021-41338 セキュリティ脆弱性 公開日: 2021年10月12日 CNA割当: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 攻撃ベクトル ローカル 攻撃の複雑さ 低 必要な権限 低 ユーザー操作 なし 影響の範囲 変更なし 機密性への影響 高 完全性への影響 なし 可用性への影響 なし エクスプロイトコードの成熟度 概念実証 修正レベル 公式修正 報告の信頼性 確認済み...
gibson
Gibson Strumento di monitoraggio di rete che mappa le connessioni processo-rete, identifica i provider cloud e genera regole firewall. Agente leggero per la raccolta, server per l'aggregazione, parser per l'analisi. Screenshot Panoramica tra macchine — confronto versioni OS, rilevamento IP...
Reachability-Check
Controllo di Raggiungibilità 🌐 EN | TR Controllo di raggiungibilità basato su browser — testa la connettività di rete, le regole del firewall e le restrizioni di accesso. File HTML singolo. Zero dipendenze. Nessun server web necessario per eseguirlo. Caratteristiche Doppia misurazione: HTTP Fetch...
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)
Last week, there were 294 vulnerabilities disclosed in 233 WordPress Plugins and 14 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 149 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...
CVE-2026-56846
A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system. Mitigation ...
CVE-2026-20028
A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...
CVE-2026-20028
A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...
EUVD-2026-53447
A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...
CVE-2026-20028
CVE-2026-20028 describes a vulnerability in Cisco Terminal Service (TS) Agent’s network driver that could allow an authenticated, remote attacker to bypass firewall rules tied to the attacker’s account. The issue stems from an incorrect mapping of network connections to user accounts, enabling an...
CVE-2026-49131 OPNsense < 26.1.9 Stored XSS via Firewall Rule Description Field
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with firewall rule management privileges to inject arbitrary HTML or JavaScript by embedding payloads in the firewall rule description field via the filter API endpoint. The unsanitized...
EUVD-2026-52430
OPNsense before 26.1.9 contains a stored cross-site scripting vulnerability that allows authenticated attackers with firewall rule management privileges to inject arbitrary HTML or JavaScript by embedding payloads in the firewall rule description field via the filter API endpoint. The unsanitized...
CVE-2026-49131
OPNsense prior to 26.1.9 is affected by a stored XSS in the firewall rule description field (via the filter API). Unsanitized descriptions are persisted and later rendered by opnsense_bootgrid.js using innerHTML, allowing an authenticated attacker with firewall rule management privileges to execu...
CVE-2026-50046
A use-after-free flaw was found in Unbound's DNS-over-TLS DoT forwarded query handling. A remote attacker can exploit a timing error during TLS handshake failures on a server under load to trigger a daemon crash, resulting in a Denial of Service DoS. Mitigation To mitigate this issue, avoid...
CVE-2026-16529
A signed integer overflow in the PCP pmGetPDU function can be exploited via crafted network packets during PDU processing or SASL negotiation. This permanently blinds the affected daemon, resulting in a total denial of service DoS for subsequent packet reads. Mitigation To mitigate this issue,...
CVE-2026-47086
A flaw was found in cyrus-imapd. An authenticated user could exploit this vulnerability by minting a URLAUTH token through the GENURLAUTH command. This allows bypassing Access Control Lists ACLs, which are rules that control access to mailboxes. Consequently, an attacker could read mail from any...
CVE-2026-44982
CVE-2026-44982 affects CrowdSec AppSec. The bug in pkg/appsec/request.go NewParsedRequestFromRequest reads the body using max(r.ContentLength, 0), causing HTTP/1.1 chunked and HTTP/2 without Content-Length to appear with an empty body, bypassing body-inspection rules (REQUEST_BODY, BODY_ARGS, ARG...
CVE-2026-33382
A flaw in Grafana's API endpoints allows remote attackers to send excessively large request bodies without authentication. This exhausts server memory, resulting in a complete denial of service DoS. Mitigation Deploy a reverse proxy or API gateway e.g., Nginx in front of Grafana configured to...