filterforge

filterforge Python 툴킷으로, Berkeley Packet FilterBPF 바이트코드를 역공학reverse-engineering 하기 위한 도구입니다. 맬웨어 샘플, 패킷 캡처 필터, 네트워크 장비에서 추출할 수 있는 원시 BPF 명령어를 입력받으면 filterforge가 이를 사람이 읽을 수 있는 형태로 디스어셈블하고, Z3를 사용하여 수용 경로를 만족하는 패킷 제약 조건 집합을 해결한 뒤, Scapy를 활용하여 해당 필터를 통과할 구체적인 네트워크 패킷을 생성합니다. 간단히 말해: BPF 프로그램을 넣으면...

CVE-2026-58085

The wg(4) driver in FreeBSD contains a flaw where it fails to verify the success of the MAC verification step after dispatching a decrypt operation to the OpenCrypto framework (OCF) . This allows the driver to silently accept packets with an invalid Poly1305 authentication tag. A remote attacker ...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

CVE-2026-66732 Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

EUVD-2026-53875

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

CVE-2025-13926

An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T...

CVE-2025-13926: Reliance on Untrusted Inputs in a Security Decision

An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T...

CVE-2020-12730

MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...

EUVD-2020-5018

Malware in sbrugna...

EUVD-2017-7910

Malware in sbrugna...

EUVD-2019-14713

Malware in sbrugna...

Exploit for Off-by-one Error in F5 Nginx

CVE-2021-23017-POC A security issue in nginx resolver was iden...

CVE-2022-27577

The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise servic...

CVE-2022-27577: Predictable Exact Value from Previous Values

The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise servic...

CVE-2020-12730

MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...

Default credentials

MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...

CVE-2020-12730

MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery...

CVE-2020-12730

CVE-2020-12730 affects MagicMotion Flamingo 2 and is reported to lack BLE encryption, enabling data sniffing and packet forgery. Multiple connected documents corroborate the vulnerability description, but none provide concrete patch/version details; no remediation information is present. If explo...

PT-2021-9468 · Unknown · Magicmotion Flamingo 2

Name of the Vulnerable Software and Affected Versions: MagicMotion Flamingo 2 affected versions not specified Description: The issue concerns a lack of BLE encryption, which enables data sniffing and packet forgery. Recommendations: At the moment, there is no information about a newer version tha...