fail2ban

/ | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: 複数の認証エラーを引き起こすホストをBANする Fail2Banは、/var/log/auth.log...

iptables-essentials

Iptables 基本: 一般的なファイアウォールルールとコマンド ☑️ TODO 便利なIptables設定例を追加する 便利なカーネル設定 sysctl の構成を追加する 外部リソースへのリンクを追加する 高度な設定例、コマンド、ルールを追加する 目次 Iptablesの設定に役立つツール マニュアル/ハウツー/チュートリアル 便利なカーネル設定 sysctl の構成 rpfilter logmartians sendredirects acceptsourceroute acceptredirects tcpsyncookies icmpechoignorebroadcasts...

gibson

Gibson プロセスとネットワーク接続のマッピング、クラウドプロバイダーの識別、ファイアウォールルールの生成を行うネットワーク監視ツール。収集用の軽量エージェント、集約用のサーバー、分析用のパーサーを備えています。 スクリーンショット マシン間の概要 — OSバージョン比較、共有IP検出、全ホストにわたるビーコン候補: ホスト別詳細 — クリティカルアラート EOL OS、nc.exe が不明IPにビーコン: ホスト別詳細 — 警告 ビーコン候補がフラグ: ホスト別詳細 — 正常 異常なし: 機能 コレクター エージェント 🔒 セキュア : オプションのAES-256-GCM暗号化 🗜️...

firewall-cve

firewall-cve Windows AppContainer 防火墙规则安全功能绕过漏洞 CVE-2021-41338 安全漏洞 发布时间：2021年10月12日 分配 CNA：Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 攻击向量 本地 攻击复杂度 低 所需权限 低 用户交互 无 影响范围 不变 机密性 高 完整性 无 可用性 无 利用代码成熟度 概念验证 修复级别 官方修复 报告置信度 已确认 有关这些指标定义的更多信息，请参阅通用漏洞评分系统。 可利用性 下表提供了此漏洞在最初发布时的可利用性评估。 是 否 利用可能性较低...

Firewall-Rules

このリポジトリには README がありません。...

Reachability-Check

到達可能性チェック 🌐 EN | TR ブラウザベースの到達可能性チェッカー — ネットワーク接続、ファイアウォールルール、アクセス制限をテストします。 単一HTMLファイル。依存関係ゼロ。実行にウェブサーバーは不要。 特徴 二重測定: HTTP Fetch + Image Ping（各サービスの独自ファビコン経由） サービスパック: JSONベース、コミュニティによる拡張可能 RuleCheck: 企業ネットワークポリシーの監査 — アクセス可能/ブロックされるべき + ピングしきい値 フィルタリングとグループ化:...

stop-bots

Stop Bots A TUI, a web UI and a CLI that help you configure your server to stop bad bots without hiding behind a CDN. It works alongside NGINX and your existing firewall iptables or nftables: NGINX config. - It classifies known bots by category scanners, search engines, AI crawlers and blocks or...

CVE-2026-82932

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in...

CVE-2026-56127

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

EUVD-2026-70496

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

CVE-2026-56127 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

PT-2026-85052

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall rules edit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escapin...

PT-2026-85053

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall schedule edit.php. The schedule description is stored without HTML sanitization and subsequently inserted into a...

CVE-2026-51720

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83898

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51720

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)

Last week, there were 274 vulnerabilities disclosed in 213 WordPress Plugins and 17 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 116 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)

Last week, there were 294 vulnerabilities disclosed in 233 WordPress Plugins and 14 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 149 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

CVE-2026-56846

A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system. Mitigation ...

CVE-2026-20028

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...