zarp

소개 zarp는 로컬 네트워크의 취약점을 악용하는 데 중점을 둔 네트워크 공격 도구입니다. 이는 시스템 취약점을 공격하는 것이 아니라, 네트워크 프로토콜과 스택을 남용하여 시스템을 장악하고 침투하며 무력화시키는 것을 의미합니다. 세션을 관리하여 여러 시스템을 동시에 신속하게 중독poison시키고 스니핑할 수 있으며, 민감한 정보를 자동으로 또는 공격자에게 직접 덤프할 수 있습니다. 다양한 프로토콜에서 사용자 이름과 비밀번호를 자동으로 파싱하고 HTTP 트래픽 등을 확인할 수 있는 여러 스니퍼가 포함되어 있습니다. 또한 다양한...

CVE-2026-101883 OpenClaw Windows Node through 2026.9.4 SSRF via canvas.present

OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capability that bypasses URL risk evaluation enforced by canvas.navigate. Attackers with gateway or agent access can issue canvas.present to make the node's WebView send requests to...

CVE-2026-47267

Gogs webhook deliveries (CVE-2026-47267) enable SSRF via redirects even after the CVE-2022-1285 fix; localCIDR/169.254.169.254 exposure was demonstrated in GHSA advisory. Affected: Gogs before 0.14.3; fix: upgrade to 0.14.3 (or apply redirect-checking mitigation, e.g., Client.CheckRedirect). Impa...

CVE-2026-47267

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the fix for CVE-2022-1285 prevents adding webooks or running webhooks with URLs with a hostname that resolves in localCIDRs. However, webhooks still follow redirects allowing to access hostname inside localCIDRs. This vulnerability ...

PT-2026-51449

Name of the Vulnerable Software and Affected Versions Gogs versions prior to 0.14.3 Description An issue exists where webhooks follow redirects, allowing access to hostnames within localCIDRs Internet Protocol address ranges used for local networks. This leads to Server Side Request Forgery SSRF,...

EUVD-2026-32893

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-45245

Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-controlled links, causing the extension to make authenticated daemon requests using stored tokens without verifying event trustworthines...

CVE-2026-7961

Google Chrome and the Chromium browser (including versions used in Astra Linux , Fedora , and Debian ) are vulnerable to a security flaw due to insufficient validation of untrusted input in the Permissions feature. This flaw exists in versions prior to 148.0.7778.96 . An attacker on the local net...

OpenClaw 访问控制错误漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.2 contained a access control vulnerability, which stemmed from improper access control in the iOS A2UI bridge. This vulnerability could allow attackers to inject unauthorized...

The vulnerability of the Avahi service detection system in local networks, related to uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the Avahi service detection system in local networks is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-35409

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.0, a Server-Side Request Forgery SSRF protection bypass has been identified and fixed in Directus. The IP address validation mechanism used to block requests to local and private networks could be...

CVE-2026-35409

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.0, a Server-Side Request Forgery SSRF protection bypass has been identified and fixed in Directus. The IP address validation mechanism used to block requests to local and private networks could be...

The vulnerability of the Avahi service detection system in local networks, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Avahi service detection system in local networks is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the Avahi service detection system in local networks, related to the lack of use of the assert() function, allows a perpetrator to trigger a service failure.

The vulnerability of the Avahi service detection system in local networks is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Avahi service detection system in local networks, related to the lack of use of the assert() function, allows a perpetrator to trigger a service failure.

The vulnerability of the Avahi service detection system in local networks is related to the lack of use of the assert function. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

The vulnerability of the Avahi service detection system in local networks, related to the lack of use of the assert() function, allows a perpetrator to trigger a service failure.

The vulnerability of the Avahi service detection system in local networks is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Cisco IOS XE Software 资源管理错误漏洞

Cisco IOS XE Software is a network operating system developed by the American company Cisco. There is a resource management vulnerability in Cisco IOS XE Software, which stems from improper handling of BOOTP packets. This vulnerability may lead to BOOTP packets being forwarded between VLANs,...

CVE-2025-15515

The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific conditions are met on a local network, it can cause data leakage...

CVE-2025-15515

The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability. If specific conditions are met on a local network, it can cause data leakage...

Media Streaming add-on 缓冲区错误漏洞

The Media Streaming add-on is a supplementary component for media streaming. The Media Streaming add-on has a buffer error vulnerability, which stems from out-of-bounds reading. This vulnerability could allow attackers to obtain sensitive data after gaining access to the local network...