vallumd

vallumd 本程序允许您集中和分发 IP 黑名单。 如果您在互联网上维护一个服务器，很有可能会遇到一两次暴力破解攻击。没关系，只需安装 fail2ban 即可搞定。 但是，如果您运行着多个服务器，每个服务器都有各自的 fail2ban 实例，那么它们封禁的 IP 地址列表将各不相同。难道不想所有 fail2ban 实例共享一个封禁列表吗？或者，如果您所有的机器都位于您自己控制的路由器或防火墙后面，难道不想在网络边缘就拦截恶意流量吗？ 这正是 vallumd 可以帮助您实现的目标。 工作原理 Vallumd 连接到 MQTT 代理，读取包含 IP 地址的消息，并将这些 IP...

siper

Siper（盾牌） Siper 是一款高性能、基于 XDP 的 IP 黑名单防火墙，使用 Go 和 C（eBPF）构建。它允许你在 Linux 网络栈的最早阶段——网络驱动程序级别——丢弃恶意流量。通过利用 XDP（快速数据路径），Siper 在数据包甚至到达内核繁重的网络子系统之前就对其进行处理，从而在重 DDoS 条件下提供极致性能。 特性 XDP 驱动性能 ：使用 XDPDROP 在 NIC 驱动级别进行数据包过滤，相比 iptables 或 nftables，CPU 开销显著降低。 LPM（最长前缀匹配） ：通过专用的 BPF LPM Trie 映射支持基于 CIDR 的阻止（例...

BearFTP

BearFTP ¿Te atreves a hackear a un oso? BearFTP es un servidor FTP honeypot, diseñado para registrar los intentos de los hackers y reportarlos a bases de datos públicas de listas negras de IP. Características: Soporte de configuración sin necesidad de recompilar Edita archivos y el contenido de l...

CVE-2026-48707 InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery SSRF vulnerability in the file upload functionality system/core/uploader.php at lines 509-532. When the "upload from URL" feature follows an HTTP redirect, the redirected...

CVE-2026-48707 InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery SSRF vulnerability in the file upload functionality system/core/uploader.php at lines 509-532. When the "upload from URL" feature follows an HTTP redirect, the redirected...

CVE-2026-33234

Cómo Convertí la Función de Correo de AutoGPT en un Escáner de Red Interna CVE-2026-33234 | Moderado 5.0 | GHSA-4jwj-6mg5-wrwf Autor: Pavan Nallamothu Estaba mapeando cada entrada controlada por el usuario que tocaba la red en la Plataforma AutoGPT. La capa HTTP estaba bien asegurada. Rangos de I...

CVE-2026-35219 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

Budibase is an open-source low-code platform. Prior to 3.41.3, automation steps in packages/server/src/automations/steps/outgoingWebhook.ts, packages/server/src/automations/steps/zapier.ts, packages/server/src/automations/steps/n8n.ts, packages/server/src/automations/steps/slack.ts, and...

CVE-2026-35219 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

Budibase is an open-source low-code platform. Prior to 3.41.3, automation steps in packages/server/src/automations/steps/outgoingWebhook.ts, packages/server/src/automations/steps/zapier.ts, packages/server/src/automations/steps/n8n.ts, packages/server/src/automations/steps/slack.ts, and...

GHSA-5FPJ-28RV-84R7 Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist

Summary Budibase automation steps outgoing webhook, Zapier, n8n, Slack, Discord, Make.com make server-side HTTP requests to user-provided URLs using node-fetch directly, completely bypassing the IP blacklist protection that exists in the REST API integration. Additionally, the REST API blacklist...

CVE-2026-67311

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to...

CVE-2026-67311

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to...

CVE-2026-67311

Budibase before 3.38.1 is affected by a server-side request forgery in the REST datasource integration. The vulnerability arises because redirects are not validated against the IP blacklist, enabling an attacker with Builder role to configure a REST datasource that returns a redirect to internal ...

CVE-2026-67311 Budibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirect

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to...

CVE-2026-67311 Budibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirect

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. Attackers with Builder role can configure a REST datasource pointing to an external server that returns a redirect to...

CVE-2026-45548

Budibase is an open-source low-code platform. Prior to 3.34.8, the processUrlFile function in packages/server/src/automations/steps/ai/extract.ts uses fetchfileUrl directly without the IP blacklist validation that is consistently applied to all other automation steps. This allows an authenticated...

CVE-2026-45548 Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validation

Budibase is an open-source low-code platform. Prior to 3.34.8, the processUrlFile function in packages/server/src/automations/steps/ai/extract.ts uses fetchfileUrl directly without the IP blacklist validation that is consistently applied to all other automation steps. This allows an authenticated...

CVE-2026-45548

The CVE-2026-45548 entries describe a Server-Side Request Forgery (SSRF) in Budibase where processUrlFile (AI Extract File step) calls fetch(fileUrl) without the IP blacklist, bypassing protections used by other automation steps. This allowed an authenticated builder to trigger server-side reques...

EUVD-2026-32603

Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration packages/server/src/integrations/rest.ts follows HTTP redirects without re-checking the IP blacklist, allowing an authenticated Builder to access internal services cloud metadata, databases by redirecti...

EUVD-2026-32586

Budibase is an open-source low-code platform. Prior to 3.35.10, the Plugin URL upload endpoint POST /api/plugin validates the submitted URL with a single substring check: url.includes".tar.gz". Any URL containing .tar.gz anywhere in the string — in the path, query string, or fragment — passes thi...

GHSA-FGQV-JH4G-PVG2 Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration

Summary The REST datasource integration follows HTTP redirects without re-checking the IP blacklist, allowing an authenticated Builder to access internal services cloud metadata, databases by redirecting through an attacker-controlled server. The same vulnerability class was already patched in...