Lucene search
+L

1898 matches found

RedhatCVE
RedhatCVE
added 2026/09/15 6:07 a.m.9 views

CVE-2026-45769

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring engine. A remote attacker can exploit this vulnerability by sending repeated crafted User Datagram Protocol UDP traffic to the IKEv2 parser. This can cause the...

7.5CVSS5.8AI score0.01253EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/15 6:07 a.m.7 views

CVE-2026-45766

A flaw was found in Suricata, a network Intrusion Detection System. Insufficiently bounded Network File System NFS parser state structures can be exploited by a remote attacker sending crafted NFS traffic. This can cause Suricata to consume excessive memory, leading to a denial of service...

7.5CVSS7.1AI score0.00432EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/09/15 6:07 a.m.6 views

CVE-2026-45768

A flaw was found in Suricata, a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. The LDAP Lightweight Directory Access Protocol transaction state could store an unbounded number of responses. A remote attacker could send crafted UDP User...

7.5CVSS5.7AI score0.00484EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/14 11:57 p.m.10 views

MSMQ-Vulnerability

MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/14 10:08 p.m.8 views

spookyssl-pcaps

SpookySSL PCAP 및 네트워크 커버리지 PCAP이 없으면 일어난 일이 아니다 최근 공개된 OpenSSL v3.0 v3.0.6의 취약점CVE-2022-3602 이후, 우리는 악용 시도가 '네트워크 상'에서 어떻게 나타나는지 조사했습니다. 이 저장소에는 다양한 악용 시나리오의 PCAP과 Suricata용 탐지 규칙이 포함되어 있습니다. 또한 subject alternative name에 punycode로 인코딩된 이메일 주소가 포함된 합법적인 인증서의 교환을 담은 PCAP도 포함되어 있습니다. 우리는 이 pcap을 사용하...

7.5CVSS8AI score0.9077EPSS
SaveExploits6References6
Kitploit
Kitploit
added 2026/09/14 5:30 p.m.7 views

Urgent11-Suricata-LUA-scripts

Urgent11-Suricata-LUA-scripts Suricata LUA scripts to detect CVE-2019-12255, CVE-2019-12256, CVE-2019-12258, and CVE-2019-12260 CVE-2019-12255 The script checks for CVE-2019-12255, the packet that is checked needs to have the PSH, ACK, and URG flags set, and have a payload size that exceeds 1500...

9.8CVSS7.7AI score0.7525EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/13 10:48 p.m.14 views

log4shell-coraza

Log4Shell Security Lab — nginx + Coraza WAF Educational / defensive purpose : this lab contains a deliberately vulnerable app Log4j 2.14.1 and a JNDI exploit kit, ONLY for learning how to detect and block Log4Shell in an isolated environment. Do not deploy to the Internet, do not use to attack...

10CVSS7.7AI score0.99999EPSS
SaveExploits373
Kitploit
Kitploit
added 2026/09/13 5:28 p.m.9 views

signatures

Signatures This repository is designed to provide a way to create and distribute detection signatures easily. Get creative with your own detection solutions, completely unencumbered by license limitations. To help combat evil, we firmly commit our work to the public domain for the greater good of...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 5:01 p.m.8 views

suricata-rule-CVE-2025-53770

suricata-rule-CVE-2025-53770 Detection rules for CVE-2025-53770 root@kitploit: alert http $EXTERNALNET any - $HOMENET any msg: "ET EXPLOIT SharePoint RCE ToolShell CVE-2025-53770"; http.method; content: "POST"; flow: established, toserver; http.uri;...

9.8CVSS8AI score0.99998EPSS
SaveExploits42
RedhatCVE
RedhatCVE
added 2026/09/11 9:45 p.m.13 views

CVE-2026-45763

A flaw was found in Suricata. When Lua rule execution is enabled, a remote attacker could exploit certain Lua allocation patterns to bypass the intended memory limits. This could lead to the Suricata engine consuming excessive memory, resulting in a Denial of Service DoS condition...

5.9CVSS5.8AI score0.00475EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 12:00 p.m.11 views

CVE-2026-45761

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A local attacker, by providing a specially crafted rule with mixed-case frame syntax, could trigger a heap buffer overflow. This vulnerability occur...

3.3CVSS6AI score0.00138EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 11:57 a.m.14 views

CVE-2026-45752

A flaw was found in Suricata, a network Intrusion Detection System. When specific detection transforms are chained, the decompress transform pipeline can attempt to read from an inspection buffer after it has been reallocated and freed. This use-after-free vulnerability can be triggered by a...

5.9CVSS6.1AI score0.00509EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 11:57 a.m.10 views

CVE-2026-45751

A flaw was found in Suricata, a network Intrusion Detection System. A remote attacker could exploit a use-after-free vulnerability in the inspection-buffer helper. This occurs when a chained transform reallocates a buffer, leaving an inspection pointer referencing freed memory. This issue,...

5.9CVSS6AI score0.00509EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 11:57 a.m.12 views

CVE-2026-46387

A flaw was found in Suricata, a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. A remote attacker could send a specially crafted HTTP/2 DATA payload with a high compression ratio. This could cause Suricata's HTTP/2 decompression path to...

7.5CVSS5.7AI score0.00515EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 11:57 a.m.10 views

CVE-2026-45770

A flaw was found in Suricata, a network Intrusion Detection System. A specially crafted Lua rule that registers an excessive number of flow variables can corrupt the Lua detection state. This could allow an attacker to bypass Suricata's restricted Lua sandbox, potentially leading to unauthorized...

7.5CVSS5.7AI score0.00339EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 11:57 a.m.13 views

CVE-2026-45762

A flaw was found in Suricata, a network Intrusion Detection System. The IP defragmentation tracker lookup did not properly verify the IP address family of incoming packets. A remote attacker could send specially crafted fragmented IPv4/IPv6 traffic, causing an IPv6 fragment to be incorrectly...

7.5CVSS5.7AI score0.00441EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 11:57 a.m.12 views

CVE-2026-45759

A flaw was found in Suricata, a network Intrusion Detection System IDS, Intrusion Prevention System IPS, and Network Security Monitoring NSM engine. A remote attacker could exploit this vulnerability by sending crafted HTTP traffic with large Content-Disposition headers. This could lead to...

7.5CVSS5.8AI score0.00585EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 11:57 a.m.13 views

CVE-2026-45747

A flaw was found in Suricata, a network Intrusion Detection System. A remote attacker could exploit a NULL dereference vulnerability in the Lua TLS certificate information helper. This vulnerability occurs when a Lua script attempts to retrieve certificate details from TLS Transport Layer Securit...

7.5CVSS5.6AI score0.00341EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-45769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2...

7.5CVSS5.8AI score0.01253EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-45770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...

7.5CVSS5.8AI score0.00339EPSS
SaveExploits0References3
Rows per page
Query Builder