CVE-2026-63447

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.5 until 8.0.6, the FTP parser in src/app-layer-ftp.c can continue allocating transactions after app-layer.protocols.ftp.max-tx is reached while processing one large chunk...

DEBIAN-CVE-2026-63447

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.5 until 8.0.6, the FTP parser in src/app-layer-ftp.c can continue allocating transactions after app-layer.protocols.ftp.max-tx is reached while processing one large chunk...

CVE-2026-63446 Suricata app-layer: passed flows can retain transactions, causing resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSetTransactionInspectId in src/app-layer-parser.c uses an inverted guard and marks only already-inspected transactions as inspected. On flows...

CVE-2026-63446 Suricata app-layer: passed flows can retain transactions, causing resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, AppLayerParserSetTransactionInspectId in src/app-layer-parser.c uses an inverted guard and marks only already-inspected transactions as inspected. On flows...

CVE-2026-63447

Suricata (OISF network IDS/IPS/NSM engine) versions 8.0.5 through 8.0.6 are affected by a quadratic CPU consumption vulnerability in the FTP parser (src/app-layer-ftp.c). When processing a single large chunk of FTP command data, the parser can continue allocating transactions even after the app-l...

CVE-2026-63447 Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.5 until 8.0.6, the FTP parser in src/app-layer-ftp.c can continue allocating transactions after app-layer.protocols.ftp.max-tx is reached while processing one large chunk...

EUVD-2026-83387

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app-layer-ftp.c treats a RETR or STOR command sent before PORT or PASV negotiation as a fatal application-layer error instead of a recoverabl...

CVE-2026-63450

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app-layer-ftp.c treats a RETR or STOR command sent before PORT or PASV negotiation as a fatal application-layer error instead of a recoverabl...

CVE-2026-63450

Suricata (OISF) FTP application-layer parser in src/app-layer-ftp.c, prior to 8.0.6 , escalates a protocol-recoverable command-ordering error—RETR/STOR sent before PORT/PASV negotiation —to an unrecoverable APP_LAYER_ERROR (CWE-754 ). This disables all subsequent FTP application-layer inspection ...

CVE-2026-63450 Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app-layer-ftp.c treats a RETR or STOR command sent before PORT or PASV negotiation as a fatal application-layer error instead of a recoverabl...

CVE-2026-63450 Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app-layer-ftp.c treats a RETR or STOR command sent before PORT or PASV negotiation as a fatal application-layer error instead of a recoverabl...

EUVD-2026-83190

Mongoid contains an unsafe reflection weakness in the document persistence layer of its object-document mapping code. Input whose keys are passed through from an unauthenticated party by an embedding application can cause unintended internal method invocation instead of the intended array field...

Check Risk WAF

Check Risk WAF 俄罗斯综合云 WAF 解决方案，用于保护 Web 应用程序和基础设施 Russian integrated cloud WAF solution for web application and infrastructure protection 网站 · 文档 · 俄文 · English 俄文版本 Check Risk WAF 是一款俄罗斯综合云 WAF（Web 应用防火墙）解决方案，工作在 L3、L4、L7 层，旨在保护您的应用程序免受 攻击 、漏洞 、僵尸网络 、DOS/DDOS 攻击 ，一体解决。通过在 3 个不同的数据中心 为 每个...

pocs_slides

分享我在 IoT / 协议安全方面的安全公告、PoC、幻灯片和脚本。你可以通过以下方式找到我： Medium: https://medium.com/@cq674350529 博客: https://cq674350529.github.io/ 邮箱: [email protected] Twitter: @cq674350529 幻灯片 OffByOne2025: 补丁比对，你是我的剑！深入剖析 FortiGate 中两个关键的 N-day 漏洞 视频 BHEU2023: 打破理论极限：虚拟网卡与物理网卡之间的差距 合作 BHEU2022:...

BlockChainConstruction

文章前言 本篇文章我们主要对公链审计中几个值得关注的方面进行简单介绍，对于安全审计人员以及公链开发人员而言这都是一个值得借鉴与思考的项目。 体系结构 在介绍公链体系建设之前我们先来看一下区块链的体系结构： 区块链 1.0时代： 体系架构：如下图所示 代表产物：比特币、瑞波币、狗狗币、莱特币、万事达币等 区块链 2.0时代： 体系结构：如下图所示 代表产物：以太坊、LISK、Hyperledger等 主要变更： 应用层：增加了智能合约 激励层：缩短出块时间为16秒 共识层：加入DPOS、POS、PBFT 数据层：扩充了区块，支持发送数据和变量，采用优化的加密算法和Merkle树 区块链...

overload

Overload 一款基于 Python 的网络压力测试工具，提供第 2 层、第 4 层和第 7 层攻击方法，用于授权的安全测试。 !WARNING 该项目已归档，不再积极维护。源代码仍可用，但不会计划新增功能、修复错误或更新。 该项目已不再反映其开发背后的当前目标和兴趣，因此未来开发已中止。 功能特性 第 7 层攻击：HTTP、HTTP 代理、Slowloris 和 Slowloris 代理。 第 4 层 SYN 泛洪攻击，支持 POSIX 系统。 第 2 层 ARP 欺骗和断开攻击。 跨平台支持 Windows、Linux 和 Termux。 自动获取用于代理方法的公共代理。...

shadowd

Logo Shadow Daemon 是一个 Web 应用防火墙 ，它在应用层拦截请求。 该仓库包含 Shadow Daemon 的主要组件，负责请求的分析和存储。 文档 完整文档请参考 shadowd.zecure.org。 安装 准备 使用 cmake 来配置和准备项目。建议为此创建一个单独的目录。 典型的安装过程如下所示： root@kitploit: mkdir build cd build cmake -DCMAKEINSTALLPREFIX:PATH=/usr -DCMAKEBUILDTYPE=Release .. 编译 如果 cmake 成功运行，它将生成一个...

c4-meta-system

C4-META 系统 v1.0.0（研究原型） 用于多层 AI 防御的研究原型：C4 可解释性、集成分类器、反混淆、O₂ 安全引擎、ThoughtVirus 防御和 SVETILO 价值对齐。Alpha 级——已完成内部验证，外部审计待进行。 版本： 1.0.0-alpha | 状态： 研究原型 | 许可证： BSL 1.1（非生产环境免费；生产环境 → 商业授权） 作者： I.G. Selyutin。C4-META 模型合著者： N.I. Kovalev。 产品定位（2026-08）： 基于 Apache-2.0 c4protocol 构建的 更厚重的多层 C4 防御栈 （集成、O₂...

fingerprintx

功能 • 安装 • 使用 • 运行 fingerprintx • 作为库使用 • 为何不用 Nmap？ • 说明 • 致谢 fingerprintx 是一款类似于 httpx 的工具，但额外支持对 RDP、SSH、MySQL、PostgreSQL、Kafka 等服务的指纹识别。fingerprintx 可与 Naabu 等端口扫描器配合使用，对端口扫描过程中发现的端口集进行指纹识别。例如，工程师可能希望扫描某个 IP 范围，然后快速识别所有已发现端口上运行的服务。 功能 快速识别暴露的服务 应用层服务发现 与其他命令行工具配合良好 自动收集已识别服务的元数据...

Linux Distros Unpatched Vulnerability : CVE-2026-93393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that...