iptables-essentials

Iptables Essentials: Common Firewall Rules and Commands ☑️ TODO Add useful Iptables configuration examples Add useful Kernel Settings sysctl configuration Add links to useful external resources Add advanced configuration examples, commands, rules Table of Contents Tools to help you configure...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban：禁止导致多次认证错误的主机 Fail2Ban 扫描 /var/log/auth.log 等日志文件，并禁止尝试过多失败登录的 IP 地址。它通过更新系统防火墙规则，在可配置的时间内拒绝来自这些 IP 地址的新连接。Fail2Ban 开箱即用，可读取许多标准日志文件（例如 sshd 和 Apache 的日志），并且可以轻松配置，使其能够根据需要读取任何日志文件中的任何错误。 虽然 Fail2Ban...

gibson

Gibson Network monitoring tool that maps process-to-network connections, identifies cloud providers, and generates firewall rules. Lightweight agent for collection, server for aggregation, parser for analysis. Screenshots Cross-machine overview — OS version comparison, shared IP detection,...

firewall-cve

firewall-cve Vulnerabilidad de omisión de la función de seguridad de las reglas de firewall de AppContainer de Windows CVE-2021-41338 Vulnerabilidad de seguridad publicada: 12 de octubre de 2021 CNA asignado: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 Vector de ataque Local Complejidad de...

Firewall-Rules

Este repositorio no tiene un README...

Reachability-Check

可达性检测 🌐 EN | TR 基于浏览器的可达性检测器——测试网络连接、防火墙规则和访问限制。 单个HTML文件。零依赖。无需Web服务器即可运行。 功能特性 双重测量： HTTP Fetch + Image Ping（通过各服务自身的favicon） 服务包： 基于JSON，社区可扩展 规则检查（RuleCheck）： 企业网络策略审计——应可达 / 应被阻断 + 延迟阈值 筛选与分组： 快速 / 慢速 / 阻断过滤器，类别 / 状态 / 扁平列表视图 自定义查询： 对任意URL或域名进行即时测试 本地 + 公网IP 检测（WebRTC + ipify） 拖放JSON...

stop-bots

Stop Bots A TUI, a web UI and a CLI that help you configure your server to stop bad bots without hiding behind a CDN. It works alongside NGINX and your existing firewall iptables or nftables: NGINX config. - It classifies known bots by category scanners, search engines, AI crawlers and blocks or...

CVE-2026-56127

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

EUVD-2026-70496

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

CVE-2026-56127 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

PT-2026-85052

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall rules edit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escapin...

PT-2026-85053

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall schedule edit.php. The schedule description is stored without HTML sanitization and subsequently inserted into a...

CVE-2026-51720

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83898

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51720

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)

Last week, there were 274 vulnerabilities disclosed in 213 WordPress Plugins and 17 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 116 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)

Last week, there were 294 vulnerabilities disclosed in 233 WordPress Plugins and 14 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 149 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

CVE-2026-56846

A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system. Mitigation ...

CVE-2026-20028

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...

CVE-2026-20028 Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...