waf-fu

waf-fu AWS WAF v2 log browser and replayer with an interactive TUI. Pulls logs from CloudWatch, S3, and the WAF sampling API with SQLite caching, displays them in a split-pane terminal UI with auth detection and YAML-based filtering, and replays requests through Firefox, Chrome, or curl with full...

CVE-2026-18649

CVE-2026-18649 - GStreamer rtph264depay Unbounded Memory Growth DoS Proof of concept for a resource exhaustion vulnerability in GStreamer's H.264 RTP depayloader rtph264depay. The same pattern also affects rtph265depay. What it is During H.264 FU-A fragmented RTP reassembly, each incoming fragmen...

MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop Database/Table, Add/Delete Users, Dump Databases/Table w/ option for gzip...... Plus a few extra options to make life a little easier for...

DEFCON-KQL-KUNG-FU-22

DEFCON-KQL-KUNG-FU-22 My DEFCON30 Cloud Village KQL Kung Fu Workshop slide deck lives here: DEFCON30-KQL-Kung-Fu.pdf If you'd like to practice your KQL skills, visit this Log Analytics Workspace that's maintained with tons of log data by Microsoft: aka.ms/lademo...

Malicious code in gociay-unga-fu (npm)

Source: amazon-inspector 55cccce9c562e0787be13ef05abe15fc5c284143d486c64f21f87775e6999815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in @zalastax/nolb-fu (npm)

The package @zalastax/nolb-fu was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-fu- (npm)

The package @zalastax/nolb-fu- was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-73574

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

CVE-2026-73574

Zimbra Collaboration versions before 10.1.17 are affected by a local file inclusion (LFI) vulnerability in the Forward servlet of the Classic Web Client. The root cause is improper validation of the fu request parameter, allowing an unauthenticated attacker to supply a crafted path and disclose p...

CVE-2026-73574

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

EUVD-2026-58073

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

PT-2026-71680

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration versions prior to 10.1.17 Description A local file inclusion LFI issue exists in the Zimbra Classic Web Client within the Forward servlet. This is caused by improper validation of the fu request parameter, which allows an...

CVE-2026-73574: Incorrect Resource Transfer Between Spheres

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

Malicious code in drupal-fu (RubyGems)

--- Credit: OpenSSF source...

EUVD-2025-137619

Malicious code in gociay-unga-fu npm...

MAL-2025-11503 Malicious code in @zalastax/nolb-fu (npm)

The package @zalastax/nolb-fu was found to contain malicious code...

MAL-2025-11504 Malicious code in @zalastax/nolb-fu- (npm)

The package @zalastax/nolb-fu- was found to contain malicious code...

Malicious code in @zalastax/nolb-fu (npm)

The package @zalastax/nolb-fu was found to contain malicious code...

Malicious code in @zalastax/nolb-fu- (npm)

The package @zalastax/nolb-fu- was found to contain malicious code...

Ubuntu: Security Advisory (USN-6879-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...