Lucene search
+L

103 matches found

Kitploit
Kitploit
added 2026/09/12 1:53 p.m.8 views

redis_exploit

CVE-2025-49844 RediShell - 실습 환경 Redis의 심각한 CVE-2025-49844 RediShell 취약점을 테스트하고 이해하기 위한 실용적인 실습 환경입니다. ⚠️ 경고 교육 목적으로만 사용하세요! 직접 소유했거나 테스트할 명시적 권한이 있는 시스템에서만 사용하세요 인터넷에 노출하지 마세요 프로덕션 환경에서 사용하지 마세요 취약점 정보 CVE ID : CVE-2025-49844 이름 : RediShell CVSS 점수 : 10.0 치명적 유형 : Lua 인터프리터의 Use-After-Free UAF 영향...

9.9CVSS7.6AI score0.82294EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/12 8:13 a.m.8 views

CVE-2022-24834

Улучшение публичного эксплойта для CVE-2022-24834 Автор Исследовательская группа Conviso Описание Команда из Ricerca Security @RicercaSec обнаружила и успешно эксплуатировала интересную уязвимость CVE-2022-24834 в интерпретаторе Lua, включённом в Redis. Эта уязвимость представляет собой...

8.8CVSS6.7AI score0.41409EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 12:52 a.m.10 views

CVE-2025-49844-RediShell-Vulnerability-Scanner

CVE-2025-49844 RediShell 취약점 스캐너 설명 Redis에서 CVE-2025-49844RediShell 취약점을 확인하기 위한 도구입니다. 이 유틸리티는 취약점을 실제로 악용하지 않고 안전한 검사만 수행합니다. 취약점 CVE-2025-49844 - Redis Lua 인터프리터의 Use-After-Free 취약점으로, 인증된 공격자가 임의 코드를 실행RCE할 수 있게 합니다. 설치 요구 사항 Python 3.6+ 라이브러리: redis, packaging 종속성 설치 root@kitploit: pip...

9.9CVSS7.7AI score0.82294EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/10 12:42 a.m.12 views

CVE-2025-49844

CVE-2025-49844 RediShell - 실습 환경 Redis의 심각한 CVE-2025-49844 RediShell 취약점을 테스트하고 이해하기 위한 실용적인 실습 환경입니다. ⚠️ 경고 교육 목적으로만 사용하세요! 소유한 시스템이나 명시적 테스트 허가를 받은 시스템에서만 사용하세요 인터넷에 절대 노출하지 마세요 프로덕션 환경에서 절대 사용하지 마세요 취약점 정보 CVE ID : CVE-2025-49844 이름 : RediShell CVSS 점수 : 10.0 치명적 유형 : Lua 인터프리터의 Use-After-Free...

9.9CVSS7.7AI score0.82294EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/09 4:01 p.m.6 views

redis-CVE-2025-49844

CVE-2025-49844 RediShell - 실습 환경 Redis의 심각한 CVE-2025-49844 RediShell 취약점을 테스트하고 이해하기 위한 실용적인 실습 환경입니다. ⚠️ 경고 교육 목적으로만 사용하세요! 소유한 시스템이나 명시적 테스트 허가를 받은 시스템에서만 사용하세요 인터넷에 절대 노출하지 마세요 프로덕션 환경에서 절대 사용하지 마세요 취약점 정보 CVE ID : CVE-2025-49844 이름 : RediShell CVSS 점수 : 10.0 치명적 유형 : Lua 인터프리터의 Use-After-Free...

9.9CVSS7.7AI score0.82294EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/09 7:12 a.m.10 views

CVE-2025-49844-Vulnerability-Scanner

CVE-2025-49844 RediShell 취약점 스캐너 심각한 CVE-2025-49844 RediShell 취약점에 대해 Redis 인스턴스를 테스트하기 위한 종합적인 취약점 스캐너입니다. 취약점 정보 CVE ID : CVE-2025-49844 이름 : RediShell CVSS 점수 : 10.0 치명적 유형 : Lua 인터프리터의 Use-After-Free UAF 영향 : 원격 코드 실행 RCE 취약한 버전 다음 이전의 모든 Redis 버전: Redis 8.2.2 Redis 8.0.4 Redis 7.4.6 Redis...

9.9CVSS7.7AI score0.82294EPSS
SaveExploits14
OSV
OSV
added 2026/05/26 7:45 p.m.34 views

JLSEC-2026-556

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

5.5CVSS6.5AI score0.01232EPSS
SaveExploits1References4
OSV
OSV
added 2026/05/26 7:45 p.m.29 views

JLSEC-2026-558

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

6.3CVSS5.8AI score0.00985EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/05/26 4:34 p.m.15 views

CVE-2026-45721

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks upward through parent directories — past the configured server root — looking for a file named handler.lua to execute a...

9CVSS6.6AI score0.00437EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.38 views

PT-2026-47116

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

5.5AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.22 views

PT-2026-47115

Stack overflow in lua resume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

5.5AI score
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/05/12 12:00 a.m.11 views

The vulnerability of Redis’ Lua interpreter, a database management system, allows attackers to execute arbitrary code.

The vulnerability of Redis’ Lua interpreter for database management systems involves the possibility of exploiting memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS5.9AI score0.02805EPSS
SaveExploits0References9Affected Software4
The Hacker News
The Hacker News
added 2026/04/09 4:23 p.m.16 views

UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns

A previously undocumented threat cluster dubbed UAT-10362 has been attributed to spear-phishing campaigns targeting Taiwanese non-governmental organizations NGOs and suspected universities to deploy a new Lua-based malware called LucidRook. "LucidRook is a sophisticated stager that embeds a Lua...

6.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/03/05 7:30 p.m.12 views

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

7.7CVSS6AI score0.00282EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/04 6:31 p.m.19 views

EUVD-2026-9439

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

7.7CVSS6AI score0.00282EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/04 6:16 p.m.18 views

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

7.7CVSS0.00282EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/04 5:19 p.m.7 views

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

7.7CVSS6AI score0.00282EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/04 5:19 p.m.49 views

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

7.7CVSS0.00282EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/04 5:19 p.m.7 views

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

7.7CVSS6AI score0.00282EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2026/03/04 5:19 p.m.40 views

CVE-2026-20100

CVE-2026-20100 affects Cisco Secure Firewall ASA/FTD: a vulnerability in the LUA interpreter used by Remote Access SSL VPN could allow an authenticated attacker with a valid VPN connection to cause a device reload and a DoS. The issue stems from unvalidated user input in the LUA interpreter; expl...

7.7CVSS6AI score0.00282EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder