stop-bots

Stop Bots A TUI and a CLI that help you configure your server to stop bad bots without hiding behind a CDN. It is a fancy UI for your existing web server nginx or Apache and your firewall nftables or iptables. For those of us that don't want to hide behind Cloudflare and give one company the keys...

cloudflare-security-art

Cloudflare Security Configuration Free Plan About us I’m Aksana 5Ksana , founder of the open-source BitcoinArt project. My husband, Aliaksandr ALEX Zasinets , helps with security, testing, and open-source tools. Aliaksandr is a QA Automation Engineer , Penetration Tester , and open-source securit...

gibson

Gibson Network monitoring tool that maps process-to-network connections, identifies cloud providers, and generates firewall rules. Lightweight agent for collection, server for aggregation, parser for analysis. Screenshots Cross-machine overview — OS version comparison, shared IP detection,...

firewall-cve

firewall-cve Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability CVE-2021-41338 Security Vulnerability Released: Oct 12, 2021 Assigning CNA: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 Attack Vector Local Attack Complexity Low Privileges Required Low User Interaction...

Reachability-Check

Reachability Check 🌐 EN | TR Browser-based reachability checker — test network connectivity, firewall rules and access restrictions. Single HTML file. Zero dependencies. No web server required to run. Features Dual measurement: HTTP Fetch + Image Ping via each service's own favicon Service packs:...

Firewall-Rules

This repository does not have a README...

CVE-2026-111232

Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to inject scripts via the separator color field. Attackers can submit a crafted separator color value that...

CVE-2026-111232 Netgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color

Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to inject scripts via the separator color field. Attackers can submit a crafted separator color value that...

CVE-2026-58391

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and alias descriptions into HTML title attributes in filterrule.volt and natrule.volt without quote-safe encoding. The response layer uses ENTNOQUOTES, so ...

CVE-2026-58391 OPNsense: Stored XSS in Firewall Rules/NAT pages via a HTML-attribute breakout

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and alias descriptions into HTML title attributes in filterrule.volt and natrule.volt without quote-safe encoding. The response layer uses ENTNOQUOTES, so ...

CVE-2026-58391

OPNsense versions prior to 26.1.11 are vulnerable to a Stored XSS flaw in the Firewall Rules and NAT pages. The root cause is the lack of quote-safe encoding when placing stored category names or alias descriptions into HTML title attributes within filter_rule.volt and nat_rule.volt. Because the ...

EUVD-2026-102113

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and alias descriptions into HTML title attributes in filterrule.volt and natrule.volt without quote-safe encoding. The response layer uses ENTNOQUOTES, so ...

CVE-2026-58391: Improper Neutralization of Input During Web Page Generation

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and alias descriptions into HTML title attributes in filterrule.volt and natrule.volt without quote-safe encoding. The response layer uses ENTNOQUOTES, so ...

CVE-2026-111232: Improper Neutralization of Input During Web Page Generation

Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to inject scripts via the separator color field. Attackers can submit a crafted separator color value that...

fail2ban

/ | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: bloquear hosts que causan múltiples errores de autenticación Fail2Ban examina archivos de registro como /var/log/auth.log y bloquea direcciones IP que realizan demasiados intentos de inicio de sesión fallidos. Lo...

iptables-essentials

Iptables Essentials: Reglas y comandos comunes de firewall ☑️ POR HACER Añadir ejemplos útiles de configuración de Iptables Añadir configuración útil de Kernel Settings sysctl Añadir enlaces a recursos externos útiles Añadir ejemplos de configuración avanzada, comandos, reglas Tabla de Contenidos...

UBUNTU-CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

PT-2026-107622

Name of the Vulnerable Software and Affected Versions Docker affected versions not specified Description Firewall rules designed to mark VXLAN datagrams for encryption fail to distinguish between authentic datagrams sent from the kernel and forged datagrams sent by user processes. This allows any...

CVE-2026-82932

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in...