openvpn-install

openvpn-install Debian、Ubuntu、Fedora、openSUSE、CentOS、Amazon Linux、Arch Linux、Oracle Linux、Rocky Linux、AlmaLinux 向けの OpenVPN インストーラーです。 このスクリプトを使えば、数秒で独自の安全な VPN サーバーをセットアップして管理できます。 これは何ですか？ このスクリプトは、VPS や専用サーバー、あるいは自宅のコンピューターなど、自分のサーバー上で実行することを想定しています。...

Pritunl VPN Server 1.29.2145.25 - Username Enumeration

Pritunl 1.29.2145.25 contains a username enumeration issue caused by different error responses in /auth/session login attempts, letting attackers verify valid usernames, exploit requires network access to the login endpoint. id: CVE-2020-25200 info: name: Pritunl VPN Server 1.29.2145.25 - Usernam...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский Docker 기반 IPsec VPN 서버 IPsec/L2TP, Cisco IPsec 및 IKEv2를 지원하는 IPsec VPN 서버를 실행하기 위한 Docker 이미지입니다. LibreswanIPsec VPN 소프트웨어 및 xl2tpdL2TP 데몬과 함께 Alpine 3.23 또는 Debian 12 기반입니다. IPsec VPN은 네트워크 트래픽을 암호화하여, 사용자와 VPN 서버 사이의 누구도 인터넷을 통해 이동하는 데이터를 도청할 수 없도록 합니다. 이는 커피숍, 공...

pritunl-CVE-2020-25200

CVE-2020-25200 Pritunl VPNサーバ - 影響を受けるバージョン: Pritunl v1.29.2145.25 553bbd ========================= Pritunl 1.29.2145.25では、/auth/sessionへのログイン試行を連続して行うことで、攻撃者が有効なVPNユーザー名を列挙することが可能です。最初はサーバーはエラー401を返します。しかし、ユーザー名が有効な場合、20回のログイン試行後にサーバーはエラー400を返し始めます。無効なユーザー名では、永久にエラー401が返され続けます。...

NachoVPN

NachoVPN 🌮🔒 NachoVPN は、不正な VPN サーバーを使用して SSL-VPN クライアントを悪用することを実証する Proof of Concept です。 プラグイン方式のアーキテクチャを採用しており、コミュニティが追加の SSL-VPN 製品への対応を貢献できるようになっています。現在、Cisco AnyConnect、SonicWall NetExtender、Palo Alto GlobalProtect、Ivanti Connect Secure など、さまざまな人気の企業向け VPN 製品をサポートしています。 詳細については、ブログ記事 と HackFe...

CVE-2026-10872

A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function startvpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has been made public and could be used...

Shibby Tomato 操作系统命令注入漏洞

Shibby Tomato is a third-party router firmware developed by Shibby’s individual developers. Version 1.28.0000 of Shibby Tomato contains a vulnerability related to operating system command injection. This vulnerability stems from the startvpnserver function in the /sbin/rc file within the Web UI...

CVE-2026-39312

CVE-2026-39312 affects SoftEtherVPN Developer Edition 5.2.5188 and earlier. It is a pre-authentication denial-of-service where an unauthenticated remote attacker can crash the vpnserver by sending a malformed EAP-TLS packet over raw L2TP (UDP/1701), terminating all active VPN sessions. The root c...

CVE-2026-0620

The CVE-2026-0620 entry concerns the TP-Link Archer AXE75 V1 when configured as an L2TP/IPSec VPN server. Affected component: L2TP/IPSec VPN server handling; root cause: L2TP connections may be accepted without IPSec protection even if IPSec is enabled, leading to unencrypted VPN sessions and exp...

CVE-2026-22226

A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe...

CVE-2026-22226

A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on the TP-Link Archer BE230 v1.2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of...

CVE-2026-22226

A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe...

CVE-2026-22226 Command Injection Vulnerability on TP-Link Archer BE230 and AX73

A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe...

CVE-2019-11868

See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary bytes are written to...

EUVD-2025-205533

A vulnerability has been found in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/PPTPServer. Such manipulation of the argument ip1 leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

EUVD-2017-7301

Malware in sbrugna...

EUVD-2010-3879

Malware in sbrugna...

EUVD-2023-31890

Malicious code in bioql PyPI...

EUVD-2022-15940

Malicious code in bioql PyPI...

Cisco Meraki 16.2 / 17 / 18.1 < 18.107.12 / 18.2 < 18.211.2 Multiple Vulnerabilities (cisco-sa-meraki-mx-vpn-dos-QTRHzG2)

The version of the remote Cisco Meraki device is 16.2, 17, 18.1 prior to 18.107.12, or 18.2 prior to 18.211.2. It is, therefore, potentially affected by multiple vulnerabilities as referenced in the cisco-sa-meraki-mx-vpn-dos-QTRHzG2 advisory, including: - Multiple vulnerabilities in the Cisco...