socbench

socbench Benchmark frontier reasoning LLMs as SOC agents on raw NetFlow data. socbench benchmarks frontier reasoning models as SOC agents: each model runs a bounded multi-turn agent loop against a deterministic, pre-indexed NetFlow corpus, with persona-scoped read-only tools, fixed dollar caps pe...

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...

fastnetmon

Community Edition FastNetMon - A high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AFPACKET port mirror. What do we do? We detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second...

network-attack-detection

Network Attack Detection using Machine Learning Description This project leverages machine learning techniques to classify network attacks such as Port Scanning, Denial of Service DoS, and malware. The input data is in the Netflow V9 format, which is a standard format used by Cisco. The...

CVE-2026-92697

A flaw was found in FastNetMon. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by crashing the service. By sending specially crafted network packets containing unterminated data fields to the NetFlow collector, an attacker can trigger an out-of-bound...

CVE-2026-93424

A flaw was found in FastNetMon. An unauthenticated remote attacker with access to the NetFlow or IPFIX listening ports can trigger a race condition during concurrent template updates and traffic processing. This issue causes the application to access memory after it has been freed a use-after-fre...

Zoho manageengine - Cross-Site Scripting

Zoho manageengine is vulnerable to reflected cross-site scripting. This impacts Zoho ManageEngine Netflow Analyzer before build 123137, Network Configuration Manager before build 123128, OpManager before build 123148, OpUtils before build 123161, and Firewall Analyzer before build 123147 via the...

UBUNTU-CVE-2026-92697

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. Although fields longer than 128 bytes are excluded from...

Linux Distros Unpatched Vulnerability : CVE-2026-93424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peerfindtemplate in src/netflowplugin/netflowcollector.cpp and...

Linux Distros Unpatched Vulnerability : CVE-2026-92697

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled...

CVE-2026-92697

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. Although fields longer than 128 bytes are excluded from...

CVE-2026-93424

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peerfindtemplate in src/netflowplugin/netflowcollector.cpp and src/netflowplugin/netflowv9collector.cpp returns a pointer into globalnetflow9templates after releasing the cache mutex. On deployments with at...

DEBIAN-CVE-2026-93424

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peerfindtemplate in src/netflowplugin/netflowcollector.cpp and src/netflowplugin/netflowv9collector.cpp returns a pointer into globalnetflow9templates after releasing the cache mutex. On deployments with at...

DEBIAN-CVE-2026-92697

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. Although fields longer than 128 bytes are excluded from...

CVE-2026-92697

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. Although fields longer than 128 bytes are excluded from...

CVE-2026-92697 FastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds read

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. Although fields longer than 128 bytes are excluded from...

CVE-2026-92697

The FastNetMon DDoS detector and sensor (version 1.2.9 and earlier ) is vulnerable to a remote out-of-bounds read via the NetFlow v9 collector. The root cause is the use of strlen() on an attacker-controlled interface-description field without bounding the scan to the field's declared length. If ...

CVE-2026-92697 FastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds read

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. Although fields longer than 128 bytes are excluded from...

CVE-2026-93424 FastNetMon: NetFlow/IPFIX template cache returns unlocked pointers, causing heap-use-after-free on multi-port deployments

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peerfindtemplate in src/netflowplugin/netflowcollector.cpp and src/netflowplugin/netflowv9collector.cpp returns a pointer into globalnetflow9templates after releasing the cache mutex. On deployments with at...

CVE-2026-93424 FastNetMon: NetFlow/IPFIX template cache returns unlocked pointers, causing heap-use-after-free on multi-port deployments

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peerfindtemplate in src/netflowplugin/netflowcollector.cpp and src/netflowplugin/netflowv9collector.cpp returns a pointer into globalnetflow9templates after releasing the cache mutex. On deployments with at...