vallumd

vallumd 이 프로그램은 IP 블랙리스트를 중앙화하고 배포할 수 있도록 해줍니다. 인터넷에서 서버를 운영하다 보면 하나 이상의 무차별 대입 공격을 겪었을 가능성이 높습니다. 문제없습니다. 그냥 fail2ban을 설치하면 됩니다. 끝. 하지만 여러 대의 서버를 운영하고 있고 각 서버가 자신의 fail2ban 인스턴스를 실행 중이라면, 각각의 차단 목록에 서로 다른 IP 주소가 있을 것입니다. 모든 fail2ban 인스턴스에서 공유되는 차단 목록이 있다면 좋지 않을까요? 또는 모든 머신이 자신이 제어하는 라우터나 방화벽 뒤에...

siper

Siper Shield Siper는 Go와 C eBPF로 구축된 고성능 XDP 기반 IP 블랙리스트 방화벽입니다. 악성 트래픽을 Linux 네트워킹 스택에서 가장 초기 단계인 네트워크 드라이버 수준에서 차단할 수 있습니다. XDPExpress Data Path를 활용하여 Siper는 패킷이 커널의 무거운 네트워킹 서브시스템에 도달하기 전에 처리하므로, 심각한 DDoS 조건에서도 극한의 성능을 제공합니다. 특징 XDP 기반 성능 : 패킷 필터링이 NIC 드라이버 수준에서 XDPDROP을 사용하여 이루어지므로 iptables나...

BearFTP

BearFTP 곰을 해킹해 볼 용기가 있나요? BearFTP는 해커의 시도를 기록하고 공개 IP 블랙리스트 데이터베이스에 신고하도록 설계된 허니팟 FTP 서버입니다. 기능: 구성 지원 재컴파일 불필요 서버에 있는 파일 및 파일 내용 편집 FileZilla와 WinSCP에서 테스트됨. AntiNmap, AntiMetasploit, 여러분의 파일을 다운로드하려는 시도까지 신고합니다! Windows와 Linux 모두에서 작동 순수 TCP 클라이언트, 좋은 성능을 기대하세요! PASV 모드 지원 현재는 PASV만... 이 소프트웨어는...

CVE-2026-33234

AutoGPT의 이메일 기능을 내부 네트워크 스캐너로 전환한 방법 CVE-2026-33234 | 중간 5.0 | GHSA-4jwj-6mg5-wrwf 작성자: Pavan Nallamothu AutoGPT Platform에서 네트워크에 닿는 모든 사용자 제어 입력을 매핑하고 있었습니다. HTTP 계층은 철저히 잠겨 있었습니다. 사설 IP 대역10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 루프백, 클라우드 메타데이터 엔드포인트 — 모두 차단 목록에 있었습니다. 여러 각도에서 HTTP 게이트를 확인했습니...

CVE-2026-48707 InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery SSRF vulnerability in the file upload functionality system/core/uploader.php at lines 509-532. When the "upload from URL" feature follows an HTTP redirect, the redirected...

CVE-2026-48707 InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery SSRF vulnerability in the file upload functionality system/core/uploader.php at lines 509-532. When the "upload from URL" feature follows an HTTP redirect, the redirected...

CVE-2026-35219 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

Budibase is an open-source low-code platform. Prior to 3.41.3, automation steps in packages/server/src/automations/steps/outgoingWebhook.ts, packages/server/src/automations/steps/zapier.ts, packages/server/src/automations/steps/n8n.ts, packages/server/src/automations/steps/slack.ts, and...

CVE-2026-35219 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

Budibase is an open-source low-code platform. Prior to 3.41.3, automation steps in packages/server/src/automations/steps/outgoingWebhook.ts, packages/server/src/automations/steps/zapier.ts, packages/server/src/automations/steps/n8n.ts, packages/server/src/automations/steps/slack.ts, and...

GHSA-5FPJ-28RV-84R7 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

Summary Budibase automation steps outgoing webhook, Zapier, n8n, Slack, Discord, Make.com make server-side HTTP requests to user-provided URLs using node-fetch directly, completely bypassing the IP blacklist protection that exists in the REST API integration. Additionally, the REST API blacklist...

CVE-2026-67311

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to...

CVE-2026-67311

Budibase before 3.38.1 is affected by a server-side request forgery in the REST datasource integration. The vulnerability arises because redirects are not validated against the IP blacklist, enabling an attacker with Builder role to configure a REST datasource that returns a redirect to internal ...

CVE-2026-67311

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to...

CVE-2026-67311 Budibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirect

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to...

CVE-2026-67311 Budibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirect

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to...

CVE-2026-45548

Budibase is an open-source low-code platform. Prior to 3.34.8, the processUrlFile function in packages/server/src/automations/steps/ai/extract.ts uses fetchfileUrl directly without the IP blacklist validation that is consistently applied to all other automation steps. This allows an authenticated...

CVE-2026-45548 Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validation

Budibase is an open-source low-code platform. Prior to 3.34.8, the processUrlFile function in packages/server/src/automations/steps/ai/extract.ts uses fetchfileUrl directly without the IP blacklist validation that is consistently applied to all other automation steps. This allows an authenticated...

CVE-2026-45548

The CVE-2026-45548 entries describe a Server-Side Request Forgery (SSRF) in Budibase where processUrlFile (AI Extract File step) calls fetch(fileUrl) without the IP blacklist, bypassing protections used by other automation steps. This allowed an authenticated builder to trigger server-side reques...

EUVD-2026-32603

Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration packages/server/src/integrations/rest.ts follows HTTP redirects without re-checking the IP blacklist, allowing an authenticated Builder to access internal services cloud metadata, databases by redirecti...

EUVD-2026-32586

Budibase is an open-source low-code platform. Prior to 3.35.10, the Plugin URL upload endpoint POST /api/plugin validates the submitted URL with a single substring check: url.includes".tar.gz". Any URL containing .tar.gz anywhere in the string — in the path, query string, or fragment — passes thi...

GHSA-FGQV-JH4G-PVG2 Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration

Summary The REST datasource integration follows HTTP redirects without re-checking the IP blacklist, allowing an authenticated Builder to access internal services cloud metadata, databases by redirecting through an attacker-controlled server. The same vulnerability class was already patched in...