27 matches found
filterforge
filterforge Python 工具包，用于逆向工程 Berkeley Packet Filter BPF 字节码。给定原始的 BPF 指令——这些指令可能来自恶意软件样本、数据包捕获过滤器或网络设备——filterforge 将其反汇编为人类可读的形式，使用 Z3 求解满足接受路径的数据包约束，然后利用 Scapy 构建一个具体的网络数据包，使其能够通过该过滤器。 简而言之：向其提供一个 BPF 程序，它将返回一个完整的数据包（Ethernet、IPv4/IPv6、TCP/UDP/SCTP 等），该数据包可被过滤器接受——随时可以检查、保存为 PCAP 或在网络上发送。 建议安装...
CVE-2026-58085
The wg(4) driver in FreeBSD contains a flaw where it fails to verify the success of the MAC verification step after dispatching a decrypt operation to the OpenCrypto framework (OCF) . This allows the driver to silently accept packets with an invalid Poly1305 authentication tag. A remote attacker ...
CVE-2026-66732
Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...
CVE-2026-66732 Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager
Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...
EUVD-2026-53875
Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...
CVE-2026-66732
Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...
CVE-2025-13926
An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T...
CVE-2025-13926: Reliance on Untrusted Inputs in a Security Decision
An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T...
CVE-2020-12730
MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...
EUVD-2017-7910
Malware in sbrugna...
EUVD-2020-5018
Malware in sbrugna...
EUVD-2019-14713
Malware in sbrugna...
Exploit for Off-by-one Error in F5 Nginx
CVE-2021-23017-POC A security issue in nginx resolver was iden...
CVE-2022-27577
The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise servic...
CVE-2022-27577: Predictable Exact Value from Previous Values
The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise servic...
CVE-2020-12730
MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...
Default credentials
MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...
CVE-2020-12730
MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...
CVE-2020-12730
CVE-2020-12730 affects MagicMotion Flamingo 2 and is reported to lack BLE encryption, enabling data sniffing and packet forgery. Multiple connected documents corroborate the vulnerability description, but none provide concrete patch/version details; no remediation information is present. If explo...