nDPI

nDPI 什么是 nDPI？ nDPI® 是一个开源的 LGPLv3 深度包检测库。 关于 nDPI 的常见问题解答可参见此处 如何编译 nDPI 编译本项目的步骤如下： ./autogen.sh && ./configure make 如果在编译 croaring.c 时遇到错误，请尝试： ./autogen.sh && ./configure --enable-old-croaring make 若要仅编译库而不包含任何工具或测试： ./autogen.sh && ./configure --with-only-libndpi make 支持树外编译： ./autogen.sh...

CVE-2026-86098

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerabi...

UBUNTU-CVE-2026-86098

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerabi...

EUVD-2026-71791

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

Linux Distros Unpatched Vulnerability : CVE-2026-86098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer...

CVE-2026-86098

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

CVE-2026-86098

ntop nDPI versions before 6.0 contain a heap buffer overflow in the ndpi_json_string_escape function, which writes beyond caller-supplied buffer boundaries. An attacker can trigger the overflow by supplying crafted network packet data — including TLS SNI , HTTP headers , or DNS names — that reach...

CVE-2026-86098 ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

CVE-2026-86098

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

CVE-2026-86098 ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape

ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpijsonstringescape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS SNI, HTTP headers, or DNS names that reac...

PT-2026-86268

Name of the Vulnerable Software and Affected Versions ntop nDPI versions prior to 6.0 Description An out-of-bounds heap write exists in the ndpi json string escape function. This occurs because the function lacks an enforceable maximum length for the destination buffer when escaping characters fo...

Security update for glibc

This update for glibc fixes the following issues: CVE-2026-5435: resolv: More types as unknown in nssprintrrf bsc1263656, BZ 34033 resolv: Check for inetntop failure in nssprintrrf CVE-2026-6238: resolv: Fix buffer overreads in nssprintrrf bsc1263658, BZ 34069 Patch Instructions: To install this...

Exploit for Out-of-bounds Read in Ntop Ndpi

CVE PoCs This repository provides PoC files, reproduction ste...

EUVD-2005-3386

Malware in sbrugna...

EUVD-2021-22715

Malware in sbrugna...

EUVD-2014-4096

Malware in sbrugna...

EUVD-2009-2723

Malware in sbrugna...

EUVD-2000-0702

Malware in sbrugna...

EUVD-2000-0701

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2014-4165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in ntop allows remote attackers to inject arbitrary web script or HTML via the title parameter in a list action to...