waf-community-bypasses

WAF 커뮤니티 우회 Web Application Firewalls, 일명 WAF는 쓰레기입니다. 가장 저렴한 Cloudflare부터 Imperva, Akamai, F5, Checkpoint, Fortinet과 같은 "엔터프라이즈" 업체에 이르기까지 모든 벤더는 실제 보호를 전혀 제공하지 않으면서 고객을 속이고 있을 뿐입니다. WAF 시그니처의 99.9%는 1015년 전에 작성된 RegExps에 불과합니다. 이를 증명하기 위해, 커뮤니티 우회 기법이 적용된 Twitter 페이로드를 여러분이 확인할 수 있는 CSV 목록에...

Leaked-Credentials

Google Chrome의 개발자 도구Developer Tools와 정규식을 사용하여 유출된 자격 증명을 검색하려면 다음 간단한 단계를 따르세요: 1. DevTools 열기: Chrome에서 검사 중인 사이트로 이동한 다음 Ctrl+Shift+IWindows/Linux 또는 Cmd+Option+ImacOS를 눌러 개발자 도구를 엽니다. 2. 네트워크 탭으로 이동: "Network" 탭을 클릭합니다. 3. 정규식 검색 활성화: 필터 막대에서 정규식 아이콘을 클릭하여 정규식 모드를 활성화합니다. 4. 페이지 새로고침: 모든 네트워...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

detect-ransomware-filenames

랜섬웨어 파일 이름 탐지 이 패키지/스크립트는 SMB 트랜잭션을 감시하여 랜섬웨어가 사용하는 것으로 알려진 유해 파일 이름을 찾습니다. 이는 여기에서 유지 관리되는 안티랜섬웨어 파일 시스템 리소스 관리자 목록Anti-Ransomware File System Resource Manager Lists을 기반으로 합니다. 사용 방법 목록을 주기적으로 새로 고칠 수 있도록 Python 스크립트download-list.py가 포함되어 있습니다. 기본적으로 새 파일을 inputs/ 폴더에 다운로드합니다. 설치 이 패키지는 zkg를 통해...

CVE-2023-47529

CVE-2023-47529 Cloud Templates & Patterns collection = 1.2.2 - 로그 파일을 통한 민감한 정보 노출 Description: The Cloud Templates & Patterns collection plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.2 via a log file with a predictable name. This...

CVE-2026-96256

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Map block's 'marker' attribute in versions up to, and including, 6.4.5 This is due to insufficient input sanitization and output escaping ...

EUVD-2026-90594

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Map block's 'marker' attribute in versions up to, and including, 6.4.5 This is due to insufficient input sanitization and output escaping ...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2026_8339)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20268339 advisory. minimatch: minimatch: Denial of Service via specially crafted glob patterns CVE-2026-26996 minimatch: Minimatch: Denial of Service via catastrophic...

Rocky Linux 8 [CIQ] Security Update: librsvg2 / librsvg2-debuginfo / librsvg2-debugsource / etc (crlsa-2020_4709)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204709 advisory. librsvg: Resource exhaustion via crafted SVG file with nested patterns CVE-2019-20446 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_38511)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202638511 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162 vim:...

Rocky Linux 10.2 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-data / vim-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_38509)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202638509 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162 vi...

brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns

A flaw was found in brace-expansion. A remote attacker can provide specially crafted brace patterns with excessive nested groups or large arrays to trigger uncontrolled recursion during parsing. This behavior exhausts the native call stack and crashes the application process, leading to a Denial ...

brace-expansion: brace-expansion: Denial of Service via crafted brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying specially crafted string patterns with repeated closing braces. Processing these malformed patterns causes the string expansion logic to repeatedly rescan the entire input, leading to excessive...

brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns

A flaw was found in brace-expansion. A remote attacker can provide specially crafted brace patterns with excessive nested groups or large arrays to trigger uncontrolled recursion during parsing. This behavior exhausts the native call stack and crashes the application process, leading to a Denial ...

brace-expansion: brace-expansion: Denial of Service via crafted brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying specially crafted string patterns with repeated closing braces. Processing these malformed patterns causes the string expansion logic to repeatedly rescan the entire input, leading to excessive...

brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...

brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns

A flaw was found in brace-expansion. A remote attacker can provide specially crafted brace patterns with excessive nested groups or large arrays to trigger uncontrolled recursion during parsing. This behavior exhausts the native call stack and crashes the application process, leading to a Denial ...

brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the...