lua-ffi-libinjection

Nome lua-resty-libinjection - Binding LuaJIT FFI per libinjection Stato Questa libreria è in sviluppo attivo ed è pronta per la produzione Descrizione Questa libreria fornisce binding FFI per libinjection, un tokenizer e analizzatore SQL/SQLi e XSS. Installazione Installa questa libreria come...

aiengine

AIEngine Motore di Intelligenza Artificiale AIEngine è un motore per sistemi di rilevamento delle intrusioni di rete NIDS di nuova generazione, interattivo/programmabile in Python/Ruby/Java/Lua e Go, con capacità di apprendimento senza alcun intervento umano, classificazione dei domini DNS,...

redis_exploit

CVE-2025-49844 RediShell - Ambiente di Laboratorio Un ambiente di laboratorio pratico per testare e comprendere la critica vulnerabilità CVE-2025-49844 RediShell in Redis. ⚠️ AVVERTENZA Questo è solo a scopo educativo! Utilizzare solo su sistemi di tua proprietà o per cui hai esplicita...

Linux Distros Unpatched Vulnerability : CVE-2026-92705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts...

DEBIAN-CVE-2026-92705

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

CVE-2026-92705

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

UBUNTU-CVE-2026-92705

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

CVE-2026-92705

The cross-platform subtitle editor Aegisub (versions 3.2.0 to 3.4.2) is vulnerable to arbitrary code execution because it automatically loads Automation scripts referenced in ASS project metadata without verifying user trust. An attacker can distribute a crafted ASS file and a malicious script to...

EUVD-2026-95988

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

CVE-2026-92705 Aegisub executes arbitrary code through automatically loaded Automation scripts

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

CVE-2026-92705 Aegisub executes arbitrary code through automatically loaded Automation scripts

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

BIT-THRIFT-2026-96292 Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic)

Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

BIT-THRIFT-2026-94658 Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic)

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

BIT-THRIFT-2026-94655 Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic

Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

BIT-THRIFT-2026-94635 Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name

Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

BIT-THRIFT-2026-66858 Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)

The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. Affected: the Python C++ accelerator the pure-Python protocols are not affected, the PHP library and its...

CLEANSTART-2026-DN02833 carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)

Security vulnerability affects the apache2 package. A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts...

PT-2026-109323

Name of the Vulnerable Software and Affected Versions Aegisub versions 3.2.0 through 3.4.2 Description Aegisub automatically loads Automation scripts referenced by the Automation Scripts metadata in ASS subtitle projects without verifying user trust in the scripts or their authors. This allows an...

CVE-2026-92705: Improper Neutralization of Null Byte or NUL Character

Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by Automation Scripts metadata in ASS subtitle projects without asking whether the user trusts the scripts or their authors. An attacker can distribute a crafted AS...

PT-2026-109222

Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...