MSMQ-Vulnerability

Laboratorio de Seguridad MSMQ Este repositorio documenta una revisión controlada de laboratorio de la exposición de seguridad de Microsoft Message Queuing, centrada en la validación defensiva, la evidencia de detección y la planificación de remediación. El proyecto está planteado como un artefact...

spookyssl-pcaps

PCAPs de SpookySSL y Cobertura de Red PCAPs o no sucedió Tras la reciente vulnerabilidad divulgada en OpenSSL v3.0 hasta v3.0.6 CVE-2022-3602, hemos investigado cómo se ve un intento de explotación 'en el cable'. Este repositorio contiene PCAPs de varios escenarios de explotación, así como reglas...

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260 CVE-2019-12255 The script checks for CVE-2019-12255, the packet that is checked needs to have the PSH, ACK, and URG flags set, and have a payload size that exceeds 1500...

log4shell-coraza

Log4Shell Security Lab — nginx + Coraza WAF Propósito educativo / defensivo : este laboratorio contiene una aplicación deliberadamente vulnerable Log4j 2.14.1 y un kit de exploits JNDI, SOLO para aprender a detectar y bloquear Log4Shell en un entorno aislado. No lo despliegues a Internet, no lo...

signatures

Firmas Este repositorio está diseñado para ofrecer una forma de crear y distribuir firmas de detección fácilmente. Sé creativo con tus propias soluciones de detección, sin limitaciones de licencia. Para ayudar a combatir el mal, comprometemos firmemente nuestro trabajo al dominio público para el...

suricata-rule-CVE-2025-53770

suricata-rule-CVE-2025-53770 Reglas de detección para CVE-2025-53770 root@kitploit: alert http $EXTERNALNET any - $HOMENET any msg: "ET EXPLOIT SharePoint RCE ToolShell CVE-2025-53770"; http.method; content: "POST"; flow: established, toserver; http.uri;...

CVE-2026-45763

A flaw was found in Suricata. When Lua rule execution is enabled, a remote attacker could exploit certain Lua allocation patterns to bypass the intended memory limits. This could lead to the Suricata engine consuming excessive memory, resulting in a Denial of Service DoS condition...

CVE-2026-45761

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A local attacker, by providing a specially crafted rule with mixed-case frame syntax, could trigger a heap buffer overflow. This vulnerability occur...

CVE-2026-45752

A flaw was found in Suricata, a network Intrusion Detection System. When specific detection transforms are chained, the decompress transform pipeline can attempt to read from an inspection buffer after it has been reallocated and freed. This use-after-free vulnerability can be triggered by a...

CVE-2026-45751

A flaw was found in Suricata, a network Intrusion Detection System. A remote attacker could exploit a use-after-free vulnerability in the inspection-buffer helper. This occurs when a chained transform reallocates a buffer, leaving an inspection pointer referencing freed memory. This issue,...

CVE-2026-46387

A flaw was found in Suricata, a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. A remote attacker could send a specially crafted HTTP/2 DATA payload with a high compression ratio. This could cause Suricata's HTTP/2 decompression path to...

CVE-2026-45770

A flaw was found in Suricata, a network Intrusion Detection System. A specially crafted Lua rule that registers an excessive number of flow variables can corrupt the Lua detection state. This could allow an attacker to bypass Suricata's restricted Lua sandbox, potentially leading to unauthorized...

CVE-2026-45762

A flaw was found in Suricata, a network Intrusion Detection System. The IP defragmentation tracker lookup did not properly verify the IP address family of incoming packets. A remote attacker could send specially crafted fragmented IPv4/IPv6 traffic, causing an IPv6 fragment to be incorrectly...

CVE-2026-45759

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A remote attacker could exploit this vulnerability by sending crafted HTTP traffic with large Content-Disposition headers. This could lead to...

CVE-2026-45747

A flaw was found in Suricata, a network Intrusion Detection System. A remote attacker could exploit a NULL dereference vulnerability in the Lua TLS certificate information helper. This vulnerability occurs when a Lua script attempts to retrieve certificate details from TLS Transport Layer Securit...

Linux Distros Unpatched Vulnerability : CVE-2026-46387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,...

Linux Distros Unpatched Vulnerability : CVE-2026-45768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...

Linux Distros Unpatched Vulnerability : CVE-2026-45747

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS...

Linux Distros Unpatched Vulnerability : CVE-2026-45770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...

Linux Distros Unpatched Vulnerability : CVE-2026-45769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2...