CVE-2022-24834

Improvement of CVE-2022-24834 public exploit Author Conviso Research Team Description The team at Ricerca Security @RicercaSec discovered and successfully exploited a interesting vulnerability CVE-2022-24834 in the Lua interpreter included with Redis. This vulnerability is a heap overflow in the...

redis_exploit

CVE-2025-49844 RediShell - ラボ環境 Redis の深刻な CVE-2025-49844 RediShell 脆弱性をテストおよび理解するための実用的なラボ環境です。 ⚠️ 警告 これは教育目的のみです! 所有しているシステム、またはテストする明示的な許可を得たシステムでのみ使用してください インターネットに公開しないでください 本番環境では使用しないでください 脆弱性について CVE ID : CVE-2025-49844 名前 : RediShell CVSS スコア : 10.0 緊急 タイプ : Lua インタプリタにおける Use-After-Free...

CVE-2025-49844

CVE-2025-49844 RediShell - 实验环境 一个用于测试和理解 Redis 中严重 CVE-2025-49844 RediShell 漏洞的实用实验环境。 ⚠️ 警告 本工具仅供教育用途！ 仅可在您拥有或获得明确测试许可的系统上使用 切勿暴露到互联网 切勿在生产环境中使用 关于该漏洞 CVE ID : CVE-2025-49844 名称 : RediShell CVSS 评分 : 10.0（严重） 类型 : Lua 解释器中的释放后使用（UAF） 影响 : 远程代码执行（RCE） 发现者 : Wiz Research Team 受影响版本 以下版本之前的所有 Redis...

redis-CVE-2025-49844

CVE-2025-49844 RediShell - 实验环境 一个用于测试和理解 Redis 中严重 CVE-2025-49844 RediShell 漏洞的实用实验环境。 ⚠️ 警告 本工具仅供教育用途！ 仅可在您拥有或获得明确测试许可的系统上使用 切勿暴露到互联网 切勿在生产环境中使用 关于该漏洞 CVE ID : CVE-2025-49844 名称 : RediShell CVSS 评分 : 10.0（严重） 类型 : Lua 解释器中的释放后使用（UAF） 影响 : 远程代码执行（RCE） 发现者 : Wiz Research Team 受影响版本 以下版本之前的所有 Redis...

CVE-2025-49844-Vulnerability-Scanner

CVE-2025-49844 RediShell 漏洞扫描器 一个全面的漏洞扫描器，用于针对严重的 CVE-2025-49844 RediShell 漏洞测试 Redis 实例。 关于该漏洞 CVE ID : CVE-2025-49844 名称 : RediShell CVSS 评分 : 10.0（严重） 类型 : Lua 解释器中的释放后使用（UAF） 影响 : 远程代码执行（RCE） 受影响版本 以下版本之前的所有 Redis 版本： Redis 8.2.2 Redis 8.0.4 Redis 7.4.6 Redis 7.2.11 安装 前提条件 安装 Python 依赖 pip...

CVE-2025-49844-RediShell-Vulnerability-Scanner

CVE-2025-49844 RediShell 漏洞扫描器 描述 用于检测 Redis 中 CVE-2025-49844 RediShell 漏洞的工具。该工具执行安全检测，不会对漏洞进行实际利用。 漏洞信息 CVE-2025-49844 - Redis Lua 解释器中的 Use-After-Free 漏洞，允许已认证的攻击者执行任意代码（RCE）。 安装 环境要求 Python 3.6+ 依赖库：redis、packaging 安装依赖 pip install redis packaging...

ROS-20260803-73-0005

The vulnerability of Redis’ Lua interpreter for database management systems involves the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260708-73-0035

The vulnerability of Redis’ Lua interpreter for database management systems involves the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the checkstackGC() function in the Lua script interpreter allows a attacker to trigger a service failure.

The vulnerability of the checkstackGC function in the Lua script interpreter is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

JLSEC-2026-556

Stack overflow in luaresume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

JLSEC-2026-558

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

CVE-2026-45721

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks upward through parent directories — past the configured server root — looking for a file named handler.lua to execute a...

PT-2026-47116

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

PT-2026-47115

Stack overflow in lua resume of ldo.c in Lua Interpreter 5.1.05.4.4 allows attackers to perform a Denial of Service via a crafted script file...

CVE-2026-45721: Improper Input Validation

Algernon is a small self-contained pure-Go web server. Prior to 1.17.7, when Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks upward through parent directories — past the configured server root — looking for a file named handler.lua to execute a...

The vulnerability of Redis’ Lua interpreter, a database management system, allows attackers to execute arbitrary code.

The vulnerability of Redis’ Lua interpreter for database management systems involves the possibility of exploiting memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns

A previously undocumented threat cluster dubbed UAT-10362 has been attributed to spear-phishing campaigns targeting Taiwanese non-governmental organizations NGOs and suspected universities to deploy a new Lua-based malware called LucidRook. "LucidRook is a sophisticated stager that embeds a Lua...

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

EUVD-2026-9439

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

CVE-2026-20100

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...