Memcrashed-DDoS-Exploit

MEMCRASHED DDOS エクスプロイトツール 著者: @037 このツールを使用すると、Shodan.io から取得した Memcached サーバーに偽装された UDP パケットを送信できます。 前提条件 必要なのは Python 3.x がインストールされていることだけです。 apt-get install python3 Scapy と Shodan モジュールがインストールされている必要もあります。 pip install scapy pip install shodan Shodan API の使用 このツールを使用するには、アップグレードされた Shodan API...

CVE-2024-44902

CVE-2024-44902 脆弱性の説明 Thinkphp v6.1.3 から v8.0.4 における逆シリアル化の脆弱性により、攻撃者は任意のコードを実行できます。 影響を受けるバージョン Thinkphp v6.1.3 から v8.0.4 エクスプロイト条件 thinkphpフレームワークにMemcached拡張機能がインストールされている必要があります。 脆弱性の確認 テスト環境: php8.0.7+thinkphp8.0.4+memcached3.2.0 まず、app\controller\Index.php に新しい逆シリアル化エンドポイントを追加します。例: padding...

Gopherus

Gopherus SSRF に脆弱な場所をご存知なら、このツールは SSRF（Server Side Request Forgery）を悪用して RCE（Remote Code Execution）を獲得するための Gopher ペイロードを生成するのに役立ちます。また、被害者サーバー上でリバースシェルを取得するのにも役立ちます。詳細については、同じテーマのブログ Gopherus に関するブログ をご覧ください。 概要 このツールは以下のペイロードを生成できます: 1. MySQL Port-3306 2. PostgreSQLPort-5432 3. FastCGI Port-900...

CVE-2026-103831

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2026-103831 Insecure deserialization in the TrueLayer Magento 2 plugin

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2026-103831

The TrueLayer Magento 2 plugin contains an insecure deserialization vulnerability in the Psr16CacheAdapter component. The root cause is the use of PHP's native unserialize() function without restricting allowed classes when retrieving data from the cache. An attacker with the ability to write man...

EUVD-2026-93363

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2026-103831 Insecure deserialization in the TrueLayer Magento 2 plugin

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

PT-2026-106707

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2021-33026

CVE-2021-33026 Pickleシリアライゼーションのリモートコード実行 - Memcachedポイズニング PoCエクスプロイト CVE-2021-3306とは？ 「Flask-Caching拡張（バージョン1.10.1まで）は、FlaskでシリアライゼーションにPickleを利用しており、リモートコード実行やローカルの権限昇格を引き起こす可能性があります。攻撃者がキャッシュストレージ（例：ファイルシステム、Memcached、Redisなど）へのアクセスを得た場合、細工されたペイロードを構築し、キャッシュを汚染してPythonコードを実行できます。」...

Zimbra Collaboration Suite - Memcached Command Injection

Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...

Rocky Linux 9 [CIQ] Security Update: memcached / memcached-debuginfo / memcached-debugsource / etc (crlsa-2026_27862)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202627862 advisory. memcached: memcached: Username enumeration via timing side channel CVE-2026-47783 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.2 [TuxCare] Security Update: apr-util / apr-util-bdb / apr-util-devel / apr-util-ldap / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786553851)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786553851 advisory. - APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords...

Rocky Linux 10.2 [CIQ] Security Update: memcached / memcached-debuginfo / memcached-debugsource / etc (crlsa-2026_27842)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202627842 advisory. memcached: memcached: Username enumeration via timing side channel CVE-2026-47783 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.2 [TuxCare] Security Update: memcached / memcached-devel / memcached-selinux (ALMALINUX9.2:CLSA-2026:1779095842)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779095842 advisory. - Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file...

Rocky Linux 8 [CIQ] Security Update: apr-util / apr-util-bdb / apr-util-bdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_69113)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669113 advisory. apr-util: Apache Portable Runtime Utility: Heap buffer overflow in redis client CVE-2026-34501 apr-util: Apache Portable Runtime Utility: Information...

AlmaLinux 9.2 [TuxCare] Security Update: memcached / memcached-devel / memcached-selinux (ALMALINUX9.2:CLSA-2026:1783635895)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783635895 advisory. - In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon ...

Rocky Linux 9.6 [TuxCare] Security Update: apr-util / apr-util-bdb / apr-util-devel / apr-util-ldap / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786481279)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786481279 advisory. - A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from...

CentOS Linux 7 [TuxCare] Security Update: apr-util / apr-util-devel / apr-util-ldap / apr-util-mysql / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786495987)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786495987 advisory. - A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrust...

AlmaLinux 9.6 [TuxCare] Security Update: memcached / memcached-devel / memcached-selinux (ALMALINUX9.6:CLSA-2026:1783629498)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783629498 advisory. - In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon ...