filterforge

filterforge Berkeley Packet Filter BPF バイトコードをリバースエンジニアリングするための Python ツールキット。生の BPF 命令（マルウェアサンプル、パケットキャプチャフィルター、ネットワークアプライアンスなどから抽出する可能性のあるもの）を入力として、filterforge はそれらを人間が読める形式に逆アセンブルし、Z3 を使用して受理パスを満たすパケット制約のセットを解決し、Scapy を活用してフィルターを通過する具体的なネットワークパケットを生成します。 簡単に言えば、BPF...

CVE-2026-58085

CVE-2026-58085 is a missing MAC validation flaw in the wg(4) kernel driver (if_wg) of FreeBSD , which implements the WireGuard VPN protocol. After dispatching a ChaCha20-Poly1305 decrypt operation to the OpenCrypto framework (OCF) , the driver failed to verify whether the Poly1305 MAC step succee...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

CVE-2026-66732 Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

EUVD-2026-53875

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

CVE-2025-13926

An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T...

CVE-2020-12730

MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...

EUVD-2020-5018

Malware in sbrugna...

EUVD-2019-14713

Malware in sbrugna...

EUVD-2017-7910

Malware in sbrugna...

Exploit for Off-by-one Error in F5 Nginx

CVE-2021-23017-POC A security issue in nginx resolver was iden...

CVE-2022-27577

The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise servic...

CVE-2020-12730

MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...

Default credentials

MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...

CVE-2020-12730

MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...

CVE-2020-12730

CVE-2020-12730 affects MagicMotion Flamingo 2 and is reported to lack BLE encryption, enabling data sniffing and packet forgery. Multiple connected documents corroborate the vulnerability description, but none provide concrete patch/version details; no remediation information is present. If explo...

PT-2021-9468 · Unknown · Magicmotion Flamingo 2

Name of the Vulnerable Software and Affected Versions: MagicMotion Flamingo 2 affected versions not specified Description: The issue concerns a lack of BLE encryption, which enables data sniffing and packet forgery. Recommendations: At the moment, there is no information about a newer version tha...

pyrad packet spoofing vulnerability

pyrad is a RADIUS client implementation. A security vulnerability exists in the 'CreateID' function of the packet.py file in pyrad versions prior to 2.1. A remote attacker can exploit this vulnerability to forge packets by predicting the next ID...

wpa_supplicant: reinstallation of the group key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame

A new exploitation technique called key reinstallation attacks KRACK affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used group key GTK during a Wireles...

wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake

A new exploitation technique called key reinstallation attacks KRACKs affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit this attack to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by reinstalling a previously used pairwise key PTK-TK during a...