lua-ffi-libinjection

名前 lua-resty-libinjection - libinjection 用 LuaJIT FFI バインディング ステータス このライブラリは活発に開発中であり、本番環境で使用可能です 説明 このライブラリは、SQL/SQLi および XSS のトークナイザー兼アナライザーである libinjection 用の FFI バインディングを提供します。 インストール このライブラリは、他の OpenResty Lua モジュールと同様にインストールしてください。libinjection 共有オブジェクトファイルは luapackagecpath 内に配置する必要があるため、.so...

lua-ffi-libinjection

Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...

snort3

Snort++ Snort 3 は次世代の Snort IPS（不正侵入防止システム）です。 このファイルでは、Snort++ の特徴と、ダウンロードからデモまでの手順を説明します。Snort に不慣れな場合は、まず Snort のドキュメントを参照してください。以下のトピックを扱います： 概要 依存関係 ダウンロード Snort のビルド Snort の実行 ファズテスト ドキュメント Squeal 概要 このバージョンの Snort++ には、新機能に加えて Snort 2.X の全機能と、基本バージョンの Snort に対するバグ修正が含まれています（後述の一部を除く）：...

USN-8732-1: Minetest vulnerability

It was discovered that Minetest did not properly sanitize the Lua sandbox environment when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code and gain full file system access on the server. An attacker could use this issue to compromise the server...

USN-8732-1 minetest vulnerability

It was discovered that Minetest did not properly sanitize the Lua sandbox environment when using LuaJIT. A malicious mod could escape the sandbox to execute arbitrary code and gain full file system access on the server. An attacker could use this issue to compromise the server...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: luajit (UTSA-2025-002298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002298 advisory. LuaJIT through 2.1.0-beta3 has an out-of-bounds read in ljerrrun in ljerr.c. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: luajit (UTSA-2025-002299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002299 advisory. LuaJit through 2.1.0-beta3 has an out-of-bounds read because gc handler frame traversal is mishandled. Tenable has extracted the preceding description block directly...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : LuaJIT vulnerabilities (USN-8544-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8544-1 advisory. It was discovered that LuaJIT incorrectly handled certain inputs. An attacker could possibly...

USN-8544-1: LuaJIT vulnerabilities

It was discovered that LuaJIT incorrectly handled certain inputs. An attacker could possibly use these issues to cause a crash, resulting in a denial of service, or execute arbitrary code...

USN-8544-1 luajit vulnerabilities

It was discovered that LuaJIT incorrectly handled certain inputs. An attacker could possibly use these issues to cause a crash, resulting in a denial of service, or execute arbitrary code...

Updated luajit packages fix security vulnerabilities

In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. CVE-2019-19391 LuaJIT through 2.1.0-beta3 h...

Ubuntu 25.10 / 26.04 LTS : Luanti vulnerabilities (USN-8366-1)

The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8366-1 advisory. It was discovered that Luanti, when using LuaJIT, did not properly enforce Lua sandbox restrictions. An attacker could possibly use this issue to...

USN-8366-1 luanti vulnerabilities

It was discovered that Luanti, when using LuaJIT, did not properly enforce Lua sandbox restrictions. An attacker could possibly use this issue to execute arbitrary code. CVE-2026-40959 It was discovered that Luanti did not properly restrict access to insecure environments. An attacker could...

SUSE CVE-2026-41196

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

📄 LuaJIT 2.1.1774638290 FFI Remote Code Execution / Lua Injection

This script is a LuaJIT exploitation tool that attempts to abuse the LuaJIT FFI Foreign Function Interface to execute system commands or arbitrary shellcode on a remote Lua runtime exposed over a TCP socket. It connects to a target service, injects Lua code dynamically, and leverages unsafe FFI...

DEBIAN-CVE-2026-41196

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

CVE-2026-41196 Luanti has a mod security sandbox escape

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

CVE-2026-41196 Luanti has a mod security sandbox escape

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

EUVD-2026-25154

Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially escape the sandboxed Lua environment to execute arbitrary code and gain full filesystem access on the user's device. This applies to the...

Linux Distros Unpatched Vulnerability : CVE-2026-41196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Luanti formerly Minetest is an open source voxel game-creation platform. Starting in version 5.0.0 and prior to version 5.15.2, a malicious mod can trivially...