CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...

CVE-2022-0543

CVE-2022-0543 Lua 샌드박스 탈출 취약점을 통한 Redis RCE를 위한 완전한 기능의 익스플로잇. https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/ 를 기반으로 함. 기능: 자동 리버스 셸 -I + -P 단일 명령 실행 -x 기본 셸 기본값 TO DO: 오탐을 방지하기 위한 더 나은 검사 필요 DISCLAIMER: 이 스크립트는 시스템의 보안을 감사하기 위해 만들어졌습니다. 자신...

CVE-2022-0543-Home-Lab

CVE-2022-0543 — Redis Lua 샌드박스 탈출 원격 코드 실행 CVE‑2022‑0543 — Redis Lua 샌드박스 탈출이란? 이 취약점은 Debian / Ubuntu 패키지를 통해 설치된 Redis 에서만 발생합니다. Redis가 Lua 엔진을 동적 모듈lua-cjson, lua-bitop로 컴파일했기 때문에, 공격자는 다음을 호출할 수 있습니다: package.loadlib 시스템의 IO 함수를 로드하여 호스트에서 명령을 실행하게 되며, 이로 인해 원격 코드 실행RCE이 발생합니다. 이 랩은 무엇을...

CVE-2025-46818

CVE-2025-46818 – Redis Lua 샌드박스 교차 사용자 탈출 Redis 8.2.1에서 더 이상 사용되지 않는 Lua API와 변경 가능한 메타테이블을 통한 샌드박스 탈출. 개요 Redis 8.2.1은 더 이상 사용되지 않는 Lua 내장 함수getfenv, setfenv, newproxy를 스크립트에 노출하고 기본 타입의 메타테이블을 잠그지 않습니다. 공격자는 공유 메타테이블에 메서드를 주입하고, 권한 있는 환경을 캡처하여 다른 사용자의 권한으로 명령을 실행할 수 있습니다. 환경 Redis 서버 8.2.1또는...

CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-

CVE-2026-22003 – debug.sethook를 통한 Redis Lua 샌드박스 탈출 프로그램 코드 Lua + Python 트리거 -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end, "r" local a = 1 end return escape...

CVE-2022-0543

CVE-2022-0543 - Redis Lua サンドボックスエスケープによるリモートコード実行 Debian/Ubuntu CVE-2022-0543 は、DebianベースのLinuxディストリビューション （DebianやUbuntuを含む）上のRedisに影響を与える重大なセキュリティ脆弱性です。この脆弱性はパッケージングの欠陥に起因し、Luaサンドボックスエスケープ を引き起こします。その結果、影響を受けるシステム上でリモートコード実行（RCE）が可能になります。 アップストリームのRedis自体は脆弱ではありません —...

CVE-2022-0543

CVE-2022-0543 适用于通过Lua沙盒逃逸漏洞进行Redis RCE的完整利用程序。基于 https://thesecmaster.com/how-to-fix-cve-2022-0543-a-critical-lua-sandbox-escape-vulnerability-in-redis/。 功能: 自动反向Shell -I + -P 单条命令执行 -x 基本Shell 默认 待办: 需要更好的检测机制以防止误报 免责声明: 此脚本用于审计系统安全性。请仅在您自己的系统或已获得书面授权利用的系统上使用此脚本。...

Astra Linux – Vulnerability in Redis

It was discovered that Redis, a persistent key-value database, due to a packaging issue, is susceptible to a Lua sandbox escape that is specific to Debian. This could lead to remote code execution...

CVE-2026-45770

A flaw was found in Suricata, a network Intrusion Detection System. A specially crafted Lua rule that registers an excessive number of flow variables can corrupt the Lua detection state. This could allow an attacker to bypass Suricata's restricted Lua sandbox, potentially leading to unauthorized...

Linux Distros Unpatched Vulnerability : CVE-2026-45770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...

Linux Distros Unpatched Vulnerability : CVE-2026-45763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...

DEBIAN-CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

UBUNTU-CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770

Suricata versions 8.0.0 through 8.0.5 (exclusive) are affected by a Lua sandbox bypass. A Lua rule that registers an excessive number of flow variables can corrupt Lua detection state , potentially escaping Suricata's restricted Lua sandbox. The attack requires a crafted Lua script/rule to be loa...

CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770 Suricata lua: excessive flow variable registration can bypass sandbox

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

EUVD-2026-75797

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770 Suricata lua: excessive flow variable registration can bypass sandbox

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770 Suricata lua: excessive flow variable registration can bypass sandbox

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...