redis-poc

Redis Authenticated RCE stream NACK double free、TDigest & TopK モジュールのバグ Redis 6.2.22、7.4.9、8.6.4 に対する非破壊的なRCEエクスプロイトです。ストリームのコンシューマーグループにおける共有NACKの二重解放（CVE-2026-25243のパッチ回避）を使用し、8.8.0 ではバンドルされたRedisBloomのTDigestヒープオーバーフロー、8.8.1 ではTopKのワイルドフリー（CVE-2026-25589のパッチ回避）を使用します。 ファイル Aexploitstock.py —...

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis...

MAL-2023-716 Malicious code in python-tdigest-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5764e30c8f0fdecc8d1be71c4590440c7433bd9ff7ad6d0dad7d32eb41764303 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in python-tdigest-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5764e30c8f0fdecc8d1be71c4590440c7433bd9ff7ad6d0dad7d32eb41764303 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview python-tdigest-bindings is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...