nipe

Tor 네트워크를 기본 게이트웨이로 만드는 엔진입니다. 요약 Tor 프로젝트는 사용자가 자체 메커니즘을 통해 익명으로 인터넷을 서핑하고, 채팅하고, 인스턴트 메시지를 보낼 수 있도록 합니다. 합법적인 활동과 기타 불법적인 목적 모두를 위해 다양한 사람, 회사 및 조직에서 사용됩니다. Tor는 정보 기관, 해킹 그룹, 범죄 활동, 그리고 디지털 세계에서 자신의 프라이버시를 중요하게 생각하는 일반 사용자들까지도 널리 사용해 왔습니다. Nipe는 Perl로 개발된 엔진으로, Tor 네트워크를 기본 네트워크 게이트웨이로 만드는 것을...

CVE-2026-59277

Spring Security InetAddressMatchers utility provides matchInternal and matchExternal builders for constructing an InetAddressMatcher that classifies a given IP address as belonging to an internal private or external public network. In Spring Security 7.1.0, the internal address classification did...

EvilFOCA

Evil FOCA 必要条件 Windows XP 以降。 .NET Framework 4 以降。 Winpcap ライブラリ http://www.winpcap.org はじめに Evil Foca は、IPv4 および IPv6 データネットワークのセキュリティテストを目的とした、セキュリティペネトレーションテスターや監査人のためのツールです。 このツールは、以下のようなさまざまな攻撃を実行できます。 ARP スプーフィングと DHCP ACK インジェクションによる IPv4 ネットワーク上の MITM。 Neighbor Advertisement Spoofing、SLAA...

Egresser

Egresser 著者: [email protected] 著作権: Cyberis Limited 2013 ライセンス: GPLv3 LICENSE を参照 アウトバウンド（外向き）ファイアウォールルールをテストするために設計されたクライアント/サーバースクリプト。 説明 Egresser は、アウトバウンドファイアウォールルールを列挙するツールであり、ペネトレーションテスターが企業ネットワーク内から外向き（egress）フィルタリングが適切かどうかを評価するために設計されています。各 TCP ポートを順に調べると、Egresser サーバーはクライアントの送信元 IP...

CVE-2026-80590

A flaw was found in the Linux kernel's network fragment reassembly process. An unprivileged local user, or a guest in a virtualized environment, could craft specially formed IPv4 or IPv6 network fragments that incorrectly retain Generic Segmentation Offload GSO state after reassembly. This...

CVE-2022-21907

CVE-2022-21907 Un exploit DoS real para CVE-2022-21907 Soporta IPv4/IPv6/HTTP/HTTPS Sistemas afectados root@kitploit: - Windows - 10 Versión 1809 para sistemas de 32 bits - 10 Versión 1809 para sistemas basados en x64 - 10 Versión 1809 para sistemas basados en ARM64 - 10 Versión 21H1 para sistema...

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Net: Fixing segmentation issues with forwarding fraglists for GRO packets. This patch improves the handling of GSO segmentation by properly checking the SKBGSODODGY flag for GSO packets with a fraglist. This addresses low...

USN-8629-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...

SUSE SLES15 Security Update : nodejs24 (SUSE-SU-2026:3520-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3520-1 advisory. Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF an...

CentOS 9 : kernel-5.14.0-721.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-721.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifssanitizeprepath When...

NPM: auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback

NPM: auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback vulnerability discovered by ? in WordPress Npm auth-fetch-mcp versions = 3.0.1...

CVE-2026-47684 Sync-in Server: SSRF protection bypass via IPv4-mapped IPv6 addresses in regExpPrivateIP

Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.3.0, the private IP blocklist regex used in the URL download feature does not match IPv4-mapped IPv6 addresses e.g. ::ffff:127.0.0.1, allowing SSRF protection to be bypassed ...

PT-2026-50165

Name of the Vulnerable Software and Affected Versions Crawl4AI versions prior to 0.8.8 Description The Docker API server contains a Server-Side Request Forgery SSRF flaw where the protection mechanisms in the validate webhook url and validate url destination functions used an incomplete IPv4/IPv6...

Node.js Module axios < 0.32.0 / 1.x < 1.16.0 NO_PROXY Bypass (SSRF)

The version of the axios Node.js module installed on the remote host is prior to 0.32.0 or 1.x prior to 1.16.0. It is, therefore, affected by the following vulnerability: - shouldBypassProxy, introduced in v1.15.0 to fix CVE-2025-62718, does not normalise IPv4-mapped IPv6 addresses. When NOPROXY...

Advisory ROSA-SA-2026-3266

software: kernel-6.6 6.6.126 WASP: ROSA-CHROME unaffected versions = kernel-6.6-6.6.6.126-3 affected versions kernel-6.6-6.6.6.126-3 CVE-ID: CVE-2026-43284 BDU-ID: None CVE-Crit: NO DATA CVE-DESC.: A vulnerability in the xfrm subsystem ESP of the Linux kernel allows data decryption over non-packe...

RHCOS 4 : OpenShift Container Platform 4.14.35 (RHSA-2024:5436)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5436 advisory. - golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm CVE-2023-45290 -...

CVE-2026-43037

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: clear skb2-cb in ip4ip6err Oskar Kjos reported the following problem. ip4ip6err calls icmpsend on a cloned skb whose cb was written by the IPv6 receive path as struct inet6skbparm. icmpsend passes IPCBskb2 to...

CVE-2026-23154

A flaw was found in the Linux kernel's network GSO Generic Segmentation Offload handling. When forwarding GRO packets with fraglists through XLAT IPv4/IPv6 translation, the skbsegmentlist function incorrectly processes packets where only the head skb header is translated, leading to protocol...

AZL-77676 CVE-2026-23154 affecting package kernel for versions less than 6.6.130.1-3

In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO This patch enhances GSO segment handling by properly checking the SKBGSODODGY flag for fraglist GSO packets, addressing low throughput issues observed when a station accesses IPv4...