CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,evasión de la caja de arena Lua de Redis y ejecución de comandos Uso python3 CVE-2022-0543.py...

CVE-2022-0543

CVE-2022-0543 Fully featured exploit for Redis RCE through Lua Sandbox Escape vulnerability. Based on https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/. Features: Automatic reverse shell -I + -P Single command execution -x Basic shell Default ...

CVE-2022-0543-Home-Lab

CVE-2022-0543 — Redis Lua Sandbox Escape Remote Code Execution ¿Qué es CVE‑2022‑0543 — Redis Lua Sandbox Escape? Esta vulnerabilidad ocurre solo en Redis instalado a través del paquete Debian/Ubuntu porque Redis se compila con el motor Lua como módulo dinámico lua-cjson, lua-bitop, lo que permite...

CVE-2025-46818

CVE-2025-46818 – Escape del sandbox Lua de Redis entre usuarios Escape del sandbox mediante APIs Lua obsoletas y metatablas mutables en Redis 8.2.1. Resumen Redis 8.2.1 mantiene expuestos a los scripts los builtins Lua obsoletos getfenv, setfenv, newproxy y no bloquea las metatablas de los tipos...

CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-

CVE-2026-22003 – Escape del sandbox Lua de Redis mediante debug.sethook Código del programa disparador Lua + Python -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end,...

CVE-2022-0543

CVE-2022-0543 - Ejecución Remota de Código por Escape del Sandbox de Lua en Redis Debian/Ubuntu CVE-2022-0543 es una vulnerabilidad de seguridad crítica que afecta a Redis en distribuciones Linux basadas en Debian incluyendo Debian y Ubuntu. Está causada por un defecto de empaquetado que conduce ...

CVE-2022-0543

CVE-2022-0543 适用于通过Lua沙盒逃逸漏洞进行Redis RCE的完整利用程序。基于 https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/。 功能: 自动反向Shell -I + -P 单条命令执行 -x 基本Shell 默认 待办: 需要更好的检测机制以防止误报 免责声明: 此脚本用于审计系统安全性。请仅在您自己的系统或已获得书面授权利用的系统上使用此脚本。...

Astra Linux – Vulnerability in Redis

It was discovered that Redis, a persistent key-value database, due to a packaging issue, is susceptible to a Lua sandbox escape that is specific to Debian. This could lead to remote code execution...

CVE-2026-45770

A flaw was found in Suricata, a network Intrusion Detection System. A specially crafted Lua rule that registers an excessive number of flow variables can corrupt the Lua detection state. This could allow an attacker to bypass Suricata's restricted Lua sandbox, potentially leading to unauthorized...

Linux Distros Unpatched Vulnerability : CVE-2026-45770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...

Linux Distros Unpatched Vulnerability : CVE-2026-45763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...

DEBIAN-CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

UBUNTU-CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770

Suricata versions 8.0.0 through 8.0.5 (exclusive) are affected by a Lua sandbox bypass. A Lua rule that registers an excessive number of flow variables can corrupt Lua detection state , potentially escaping Suricata's restricted Lua sandbox. The attack requires a crafted Lua script/rule to be loa...

CVE-2026-45770 Suricata lua: excessive flow variable registration can bypass sandbox

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

EUVD-2026-75797

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770 Suricata lua: excessive flow variable registration can bypass sandbox

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770 Suricata lua: excessive flow variable registration can bypass sandbox

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...