redis_exploit

CVE-2025-49844 RediShell - 실습 환경 Redis의 심각한 CVE-2025-49844 RediShell 취약점을 테스트하고 이해하기 위한 실용적인 실습 환경입니다. ⚠️ 경고 교육 목적으로만 사용하세요! 직접 소유했거나 테스트할 명시적 권한이 있는 시스템에서만 사용하세요 인터넷에 노출하지 마세요 프로덕션 환경에서 사용하지 마세요 취약점 정보 CVE ID : CVE-2025-49844 이름 : RediShell CVSS 점수 : 10.0 치명적 유형 : Lua 인터프리터의 Use-After-Free UAF 영향...

CVE-2022-24834

Улучшение публичного эксплойта для CVE-2022-24834 Автор Исследовательская группа Conviso Описание Команда из Ricerca Security @RicercaSec обнаружила и успешно эксплуатировала интересную уязвимость CVE-2022-24834 в интерпретаторе Lua, включённом в Redis. Эта уязвимость представляет собой...

CVE-2025-49844-RediShell-Vulnerability-Scanner

CVE-2025-49844 RediShell 취약점 스캐너 설명 Redis에서 CVE-2025-49844RediShell 취약점을 확인하기 위한 도구입니다. 이 유틸리티는 취약점을 실제로 악용하지 않고 안전한 검사만 수행합니다. 취약점 CVE-2025-49844 - Redis Lua 인터프리터의 Use-After-Free 취약점으로, 인증된 공격자가 임의 코드를 실행RCE할 수 있게 합니다. 설치 요구 사항 Python 3.6+ 라이브러리: redis, packaging 종속성 설치 root@kitploit: pip...

CVE-2025-49844

CVE-2025-49844 RediShell - 실습 환경 Redis의 심각한 CVE-2025-49844 RediShell 취약점을 테스트하고 이해하기 위한 실용적인 실습 환경입니다. ⚠️ 경고 교육 목적으로만 사용하세요! 소유한 시스템이나 명시적 테스트 허가를 받은 시스템에서만 사용하세요 인터넷에 절대 노출하지 마세요 프로덕션 환경에서 절대 사용하지 마세요 취약점 정보 CVE ID : CVE-2025-49844 이름 : RediShell CVSS 점수 : 10.0 치명적 유형 : Lua 인터프리터의 Use-After-Free...

redis-CVE-2025-49844

CVE-2025-49844 RediShell - 실습 환경 Redis의 심각한 CVE-2025-49844 RediShell 취약점을 테스트하고 이해하기 위한 실용적인 실습 환경입니다. ⚠️ 경고 교육 목적으로만 사용하세요! 소유한 시스템이나 명시적 테스트 허가를 받은 시스템에서만 사용하세요 인터넷에 절대 노출하지 마세요 프로덕션 환경에서 절대 사용하지 마세요 취약점 정보 CVE ID : CVE-2025-49844 이름 : RediShell CVSS 점수 : 10.0 치명적 유형 : Lua 인터프리터의 Use-After-Free...

CVE-2025-49844-Vulnerability-Scanner

CVE-2025-49844 RediShell 취약점 스캐너 심각한 CVE-2025-49844 RediShell 취약점에 대해 Redis 인스턴스를 테스트하기 위한 종합적인 취약점 스캐너입니다. 취약점 정보 CVE ID : CVE-2025-49844 이름 : RediShell CVSS 점수 : 10.0 치명적 유형 : Lua 인터프리터의 Use-After-Free UAF 영향 : 원격 코드 실행 RCE 취약한 버전 다음 이전의 모든 Redis 버전: Redis 8.2.2 Redis 8.0.4 Redis 7.4.6 Redis...

JLSEC-2026-556

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

JLSEC-2026-558

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

CVE-2026-45721

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks upward through parent directories — past the configured server root — looking for a file named handler.lua to execute a...

PT-2026-47116

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

PT-2026-47115

Stack overflow in lua resume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

The vulnerability of Redis’ Lua interpreter, a database management system, allows attackers to execute arbitrary code.

The vulnerability of Redis’ Lua interpreter for database management systems involves the possibility of exploiting memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns

A previously undocumented threat cluster dubbed UAT-10362 has been attributed to spear-phishing campaigns targeting Taiwanese non-governmental organizations NGOs and suspected universities to deploy a new Lua-based malware called LucidRook. "LucidRook is a sophisticated stager that embeds a Lua...

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

EUVD-2026-9439

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

CVE-2026-20100

CVE-2026-20100 affects Cisco Secure Firewall ASA/FTD: a vulnerability in the LUA interpreter used by Remote Access SSL VPN could allow an authenticated attacker with a valid VPN connection to cause a device reload and a DoS. The issue stems from unvalidated user input in the LUA interpreter; expl...