zeek-spicy-ospf

zeek-spicy-ospf Este é um analisador de pacotes OSPF v2 & v3 baseado em Spicy para o Zeek. Você deve instalar Spicy para usar este pacote. Links: Lógica original importada de https://github.com/s-wells/spicyparsers/tree/main/ospf, com permissão do autor...

zeek-elf

Um Pacote ELF para Zeek Este pacote implementa: ELF TLDR! Se você tem o zkg e já executou... root@kitploit: zkg autoconfig ... então você pode instalar este pacote da seguinte forma: root@kitploit: sudo zkg install zeek-elf Agora, em qualquer script Zeek, basta carregar o plugin e ele "simplesmen...

zeek-community-id

Zeek के लिए "Community ID" फ्लो हैशिंग यह Zeek पैकेज Community ID फ्लो हैशिंग के लिए समर्थन प्रदान करता है, जो नेटवर्क मॉनिटरों में ट्रैफ़िक फ्लो को लेबल करने का एक मानकीकृत तरीका है। लोड होने पर, पैकेज conn.log में एक communityid स्ट्रिंग फ़ील्ड जोड़ता है। नोट Zeek 6 और उसके बाद के संस्करणों में...

community-id-spec

Community-ID-Flow-Hashing Bei der Verarbeitung von Flow-Daten aus einer Vielzahl von Überwachungsanwendungen wie Zeek und Suricata ist es oft wünschenswert, schnell von einem Datensatz zu einem anderen zu wechseln. Während die erforderlichen Flow-Tupel-Informationen in den Datensätzen normalerwei...

zeek-plugin-roca

Johanna::ROCA Questo plugin implementa il rilevamento delle chiavi CVE-2017-15361; è una reimplementazione del codice sorgente disponibile su https://github.com/crocs-muni/roca. Questo plugin fornisce due nuove BIFs che possono verificare le chiavi pubbliche: rocavulnerablecert verifica se un...

PT-2026-62010

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, safe-extract.py extracts uploaded archives with no limit on entry count, directory depth, total entries, or output size. A small malicious archive containing a large number of directory or file entries causes the filebeat...

PT-2026-62011

Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, safe-extract.py protects file extraction with libarchive's secure flags, but creates directory entries with a raw os.makedirsos.path.joindest, entry.pathname that has no traversal protection. An uploaded malicious archive...

EUVD-2023-59424

Malicious code in bioql PyPI...

EUVD-2023-59423

Malicious code in bioql PyPI...

EUVD-2023-59425

Malicious code in bioql PyPI...

The vulnerability of the Zeek plugin for industrial system management protocols ICSNPP-Ethercat, which involves reading data beyond the buffer in memory, allows attackers to cause service failures or gain unauthorized access to protected information.

The vulnerability of the Zeek plugin for industrial system management protocols ICSNPP-Ethercat relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain unauthorized access to protected information...

The vulnerability of the Zeek plugin for industrial control systems’ network protocols (ICSNPP-Ethercat) relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Zeek plugin for industrial control systems’ network protocols ICSNPP-Ethercat is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Zeek plugin for industrial system control protocols (ICSNPP-Ethercat) relates to writing beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Zeek plugin for industrial control systems’ network protocols ICSNPP-Ethercat is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-7242

Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in memory...

CVE-2023-7243

Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution...

CVE-2023-7243

Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution...

CVE-2023-7244

Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses function for Ethercat communication packets. This could allow an attacker to cause arbitrary code execution...

Out-of-bounds

Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific Ethercat datagrams. This could allow an attacker to cause arbitrary code execution...

CVE-2023-7242

CVE-2023-7242 affects the ICSNPP Ethercat Zeek Plugin for Zeek (versions d78dda6 and prior). The vulnerability is an out-of-bounds read in the Ethercat packet analysis path, which can crash the Zeek process and may leak information in memory. Mitigation: update to commit 3bca34c or later. ICS adv...

CVE-2023-7242 Ethercat Zeek Plugin Out-of-bounds Read

Industrial Control Systems Network Protocol Parsers ICSNPP - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of analyzing a specific Ethercat packet. This could allow an attacker to crash the Zeek process and leak some information in memory...